CVE-2025-15247
HIGHGmg137 Snap7-rs - Memory Corruption
Title source: ruleDescription
A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Exploits (1)
Scores
CVSS v3
7.3
EPSS
0.0005
EPSS Percentile
15.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-122
CWE-119
Status
published
Products (1)
gmg137/snap7-rs
Published
Dec 30, 2025
Tracked Since
Feb 18, 2026