SAP Extended Passport (EPP) Processing has a memory corruption flaw in the EPP processing library that lets an unauthenticated attacker send a crafted network request with a malformed EPP header to trigger undefined behavior and abnormal termination, with high CIA impact. Affected versions include KRNL64NUC 7.22, KRNL64UC 7.22, KERNEL 7.22, 7.22EXT, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20.