CVEvulnerability

CVE-2025-42971

4.0 MEDIUM Published 2025-07-08 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-07-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Weaknesses
CWE-787

Description

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References