CVE-2022-26106

CVE-2022-26106

Vendor Sap Se
Product SAP 3D Visual Enterprise Viewer
Weakness CWE-20 · Input validation
Published April 12, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Key dates

02Disclosure timeline

April 12, 2022 CVE published
August 3, 2024 Record updated