CVE-2025-42971CWE-787

Memory Corruption vulnerability in SAPCAR

Medium · published July 8, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-07-08T00:37Z
EPSS history
Timeline
  • 08 JUL 00:37Z
    Memory Corruption vulnerability in SAPCAR
    cvelistv5