CVE-2022-26100

CVE-2022-26100 affects SAPCAR 7.22 and stems from insufficient input validation in the SAPCAR archive handling. The vulnerability can cause the SAPCAR process to crash and may allow an attacker to obtain privileged access to the system. Connected sources (Red Hat, CNVD, CNNVD, NVD, PRION, CNVD va...

CVE-2017-8852

Summary : CVE-2017-8852 affects SAP SAPCAR 721.510. A heap-based buffer overflow occurs in the SAPCAR archive parser when processing specially crafted CAR archives, potentially enabling local code execution. The vulnerability arises from copying a length field derived from data in the archive int...

CVE-2016-5845

CVE-2016-5845 affects SAP SAPCAR and stems from not checking the return value of file operations during extraction, enabling a local attacker to trigger a crash (denial of service) via an invalid file name in a crafted archive. The related advisory (Core Security CORE-2016-0006) also covers CVE-2...