CVE-2021-21463

HIGH

SAP 3D Visual Enterprise Viewer - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

References (2)

Core 2
Core References
Permissions Required x_refsource_misc
https://launchpad.support.sap.com/#/notes/3002617

Scores

CVSS v3 8.8
EPSS 0.0048
EPSS Percentile 65.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
sap/3d_visual_enterprise_viewer 9
Published Jan 12, 2021
Tracked Since Feb 18, 2026