This vulnerability (CWE-787) in SAP NetWeaver Application Server ABAP involves an out-of-bounds write due to logical errors in memory management. An authenticated attacker with low privileges can exploit this flaw to corrupt memory, which may result in unauthorized access to sensitive data, modification of data, or denial of service conditions. The CVSS v3.1 base score is 9.9, reflecting critical impact across confidentiality, integrity, and availability. The affected versions explicitly include 7.22EXT, 7.53, 7.77, 7.93, 9.16, 9.18, 9.19, and 9.20. No official patch or remediation guidance is currently provided by the vendor, and there are no known exploits in the wild at this time.

Successful exploitation can lead to full compromise of the affected SAP NetWeaver Application Server ABAP system, including unauthorized disclosure and modification of data, as well as potential system unavailability. The vulnerability affects confidentiality, integrity, and availability with high severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, organizations should monitor SAP advisories closely for updates. In the meantime, restrict access to the affected systems to trusted users only and apply standard access controls to limit exposure.