CVE-2025-42940 – Memory Corruption vulnerability in SAP CommonCryptoLib

CVE ID : CVE-2025-42940

Published : Nov. 11, 2025, 1:15 a.m. | 16 minutes ago

Description : SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This may result in memory corruption followed by an application crash, hence leading to a high impact on availability. There is no impact on confidentiality or integrity.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…