Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-16225

davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

davenardella snap7

  • 1.4.0affected
  • 1.4.1affected
  • 1.4.2affected
  • 1.4.3affected

References