CVE-2026-90572 | davenardella snap7 up to 1.4.3 s7_micro_client.cpp opUpload DataLen memory corruption (Issue 30)

A vulnerability described as problematic has been identified in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption.

This vulnerability is handled as CVE-2026-90572. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More