Insufficient input validation leading to memory overread

NetScaler ADC and NetScaler Gateway have a flaw in how they validate user input when acting as a SAML identity provider. An attacker can send specially crafted requests that cause the system to read beyond intended memory boundaries, potentially exposing sensitive data.

Insufficient input validation in the SAML IDP implementation allows an unauthenticated or low-privileged attacker to trigger an out-of-bounds memory read via malformed SAML requests. The vulnerability enables information disclosure of adjacent memory contents without requiring code execution, with a CVSS score of 9.3 indicating critical severity.