CVE-2025-14673: gmg137 snap7-rs client.rs as_ct_write heap-based overflow

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-14 · updated 2026-09-28
Weakness: CWE-119

Description

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

gmg137 snap7-rs: through 1.142.1

References

https://gitee.com/gmg137/snap7-rs/
https://gitee.com/gmg137/snap7-rs/issues/ID2H74
https://vuldb.com/?ctiid.336402
https://vuldb.com/?id.336402

Get alerted when CVE-2025-14673 or the next vulnerability affects your stack