Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-16225 EUVD-2026-45435GHSA-cc6f-5g4h-cf75

davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write

Published Jul 19, 2026 · Updated Jul 20, 2026 · Assigned by VulDB

Description

A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Affected products

VendorProductAffectedFixed
davenardella snap7 1.4.0, 1.4.1, 1.4.2, 1.4.3 —

References