PT-2026-61062

CVE-2026-16225

Published

2026-07-19

Updated

2026-07-19

Description by

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions davenardella snap7 versions prior to 1.4.4

Description A security flaw allows for a remote out-of-bounds write, which occurs when the PDULength argument is manipulated within the TSnap7Peer::NegotiatePDULength() function located in the src/core/s7 peer.cpp file.

Recommendations Update davenardella snap7 to version 1.4.4 or later. As a temporary mitigation, restrict access to the TSnap7Peer::NegotiatePDULength() function to prevent remote manipulation of the PDULength argument.

Exploitability

Exploit

Fix

Impacts

Researchers

Chuan Wei

Vull

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write