The vulnerability CVE-2026-16225 affects davenardella snap7 up to version 1.4.3. It is caused by an out-of-bounds write in the TSnap7Peer::NegotiatePDULength function due to improper handling of the PDULength argument. This flaw can be exploited remotely without requiring user interaction or elevated privileges. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity) with network attack vector, low attack complexity, and no privileges required. Public exploit code has been released, but no official patch or remediation level has been provided by the vendor as of the published date.

Successful exploitation of this vulnerability allows an attacker to perform an out-of-bounds write remotely, potentially leading to application crashes or arbitrary code execution depending on the context. The vulnerability does not require user interaction or elevated privileges, increasing its risk. However, the CVSS score indicates medium severity, reflecting some limitations in impact or exploitability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected service to trusted sources and monitor for suspicious activity related to snap7. No vendor-provided mitigation or temporary fix is currently documented.