CVE-2025-14673

HIGH

Gmg137 Snap7-rs < 1.142.1 - Memory Corruption

Title source: rule

Description

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

gitee 1 stars

by gmg137 · rustwriteup

https://gitee.com/gmg137/snap7-rs/issues/ID2H74

References (4)

[Various Sources] https://gitee.com/gmg137/snap7-rs/

View Writeup ZIP pw:eip

[Exploit, Issue Tracking, Vendor Advisory] https://gitee.com/gmg137/snap7-rs/issues/ID2H74

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.336402

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.336402

Scores

CVSS v3 7.3

EPSS 0.0009

EPSS Percentile 25.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-122 CWE-119

Status published

Products (1)

gmg137/snap7-rs < 1.142.1

Published Dec 14, 2025

Tracked Since Feb 18, 2026