medium6.3
CVE-2026-16225
A security flaw has been discovered in davenardella snap7 up to 1.4.3.
Impact
A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected products
| Product | Affected versions |
|---|---|
| Davenardella Snap7 | before 1.4.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.