CVE-2026-115723

Snap7 versions through 1.4.3 contain an out-of-bounds write vulnerability in the passive partner component. A malicious active partner connecting from a configured peer address can overflow application buffers by declaring an unvalidated BSend total length of up to 65535 bytes while sending a sho...

CVE-2026-115723 Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion

Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and...