CVE-2026-51218: Buffer Overflow

Published Jun 29, 2026

Updated

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Affected Software

1 affected component

snap7 snap7=1.4.3

Event History

Jun 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·11:16 PM

DescriptionSeverityWeakness

Jul 1, 58548

Event

via NVD·01:30 PM

Frequently Asked Questions

Who is exposed to this issue?

Snap7 version 1.4.3 deployments that expose the affected S7 server functionality to network-reachable clients are exposed. The CVSS vector indicates network access is sufficient.

What does an attacker need to exploit it?

An attacker does not need privileges or user interaction. Exploitation requires sending a crafted packet that reaches TS7Worker::PerformFunctionWrite().

What is the expected impact?

The reported impact is denial of service caused by a heap buffer overflow. The supplied CVSS vector indicates no confidentiality or integrity impact.

CVE-2026-51218: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the expected impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the expected impact?