Issues

• Stack buffer overflow in S7 server WriteVar handler (PerformFunctionWrite, unclamped ItemsCount) — distinct from CVE-2026-15105

  davenardella/snap7#42 · Filter by author JGHyun opened on Nov 4, 2026

• Server clock reply: weekday is missing the +1 (Sunday = 1 in S7)

  davenardella/snap7#39 · Filter by author gijzelaerr opened on Oct 13, 2026

• Server SZL responses are truncated to the PDU while the header announces the full length

  davenardella/snap7#38 · Filter by author gijzelaerr opened on Oct 13, 2026

• Counter/timer transfers over one PDU advance the chunk address by bytes, not elements

  davenardella/snap7#37 · Filter by author gijzelaerr opened on Oct 13, 2026

• SetPlcDateTime encodes years outside 1990-2089 as other years

  davenardella/snap7#36 · Filter by author gijzelaerr opened on Oct 13, 2026

• ReadArea/WriteArea silently wrap byte addresses of 0x200000 and above

  davenardella/snap7#35 · Filter by author gijzelaerr opened on Oct 13, 2026

• Pre-auth out-of-bounds write in TIsoTcpSocket::isoRecvPDU() (fragment reassembly, client+server path)

  davenardella/snap7#33 · Filter by author lexi-core-ai opened on Aug 22, 2026
  1

• Server-controlled copy length in TSnap7MicroClient::opReadMultiVars() overflows each caller item buffer on Cli_ReadMultiVars

  davenardella/snap7#32 · Filter by author Mayur021 opened on Aug 1, 2026

• Server-controlled copy length in TSnap7MicroClient::opReadArea() overflows the caller's buffer on any Cli_DBRead / Cli_ReadArea

  davenardella/snap7#31 · Filter by author Mayur021 opened on Aug 1, 2026

• Server-controlled copy length in TSnap7MicroClient::opUpload() leads to negative-size memcpy and out-of-bounds read

  davenardella/snap7#30 · Filter by author Mayur021 opened on Aug 1, 2026

• Proposal: optional C++ std::thread threading backend (opt-in)

  davenardella/snap7#23 · Filter by author aleks-f opened on Jun 22, 2026

• Export the C++ classes from the shared library (SNAP7_API)

  davenardella/snap7#22 · Filter by author aleks-f opened on Jun 22, 2026

• Compiler warnings and a header-hygiene fix

  davenardella/snap7#21 · Filter by author aleks-f opened on Jun 22, 2026

• Possibly-uninitialized BitIndex in read/write area handlers

  davenardella/snap7#20 · Filter by author aleks-f opened on Jun 22, 2026

• TSnap7Server destructor disposes resources before stopping worker threads

  davenardella/snap7#19 · Filter by author aleks-f opened on Jun 22, 2026

• localtime() data race in the multi-threaded server and clients

  davenardella/snap7#18 · Filter by author aleks-f opened on Jun 22, 2026

• Client-side intra-object heap overflow in TSnap7MicroClient::opWriteArea() via unbounded negotiated PDULength

  davenardella/snap7#17 · Filter by author gff-cw opened on Jun 14, 2026

• Stack Buffer Overflow in TS7Worker::PerformFunctionRead() via Multi-Item ReadVar Response Assembly

  davenardella/snap7#16 · Filter by author gff-cw opened on Jun 7, 2026
  1

• Heap-buffer-overflow in TSnap7Partner::PickData() during passive-partner BSend fragment reassembly

  davenardella/snap7#15 · Filter by author gff-cw opened on May 19, 2026
  1

• Heap-buffer-overflow in TS7Worker::PerformFunctionWrite() when parsing malformed WriteVar request on v1.4.3

  davenardella/snap7#14 · Filter by author gff-cw opened on Apr 22, 2026
  1

• S7CommPlus support

  davenardella/snap7#13 · Filter by author escherstair opened on Mar 19, 2026

• Avoid TS7Buffer overflow when reading SZLs

  davenardella/snap7#11 · Filter by author Lintermute opened on Feb 18, 2026

• [Suggestion] Use modern poll instead of select

  davenardella/snap7#7 · Filter by author Flow86 opened on Dec 8, 2025

• [Suggestion] CMake support

  davenardella/snap7#6 · Filter by author aslze opened on Nov 25, 2025
  3

• S7.GetDateTimeAt one month back

  davenardella/snap7#5 · Filter by author antonellomangiacapra opened on Oct 30, 2025