CVE-2026-115723

Snap7 versions through 1.4.3 contain an out-of-bounds write vulnerability in the passive partner component. A malicious active partner connecting from a configured peer address can overflow application buffers by declaring an unvalidated BSend total length of up to 65535 bytes while sending a sho...