Heap Buffer Overflow in Snap7 v1.4.3

Publication date: 2026-06-29

Last updated on: 2026-06-29

Assigner: MITRE

Description

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-29

Last Modified

2026-06-29

Generated

2026-06-30

AI Q&A

2026-06-30

EPSS Evaluated

N/A

NVD

CVE-2026-51218

Affected Vendors & Products

Vendor	Product	Version / Range
snap7	snap7	1.4.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a heap buffer overflow in the TS7Worker::PerformFunctionWrite() function of the snap7 software version 1.4.3. It occurs when the function processes a specially crafted packet, which can cause the program to behave unexpectedly or crash.

Impact Analysis

An attacker exploiting this vulnerability can cause a Denial of Service (DoS) condition, meaning the affected snap7 service could crash or become unavailable, disrupting normal operations.

Hi! I’m here to help you understand CVE-2026-51218. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70