A heap-based buffer overflow vulnerability in the gmg137 snap7-rs library enables unauthenticated remote attackers to trigger memory corruption, posing a significant risk to affected systems.

This vulnerability is a heap-based buffer overflow (CWE-122) triggered within the snap7_rs::client::S7Client::as_ct_write function. The flaw allows an unauthenticated remote attacker to cause memory corruption by manipulating input processed by the library.

Successful exploitation of this memory corruption vulnerability could lead to application crashes or potentially arbitrary code execution, depending on the memory layout. With a CVSS score of 7.3, this issue represents a High severity risk that could lead to service disruption or unauthorized control over the host process.

Immediate Action: Since a specific patch version is not currently identified, users should monitor the official repository for updates and restrict network access to any applications utilizing this library.

Proactive Monitoring: Security teams should review application logs for abnormal crashes or memory access violations that may indicate exploitation attempts.

Compensating Controls: Deploy network-level traffic filtering to prevent unauthorized or untrusted entities from interacting with services utilizing the vulnerable snap7-rs library.

Public Exploit Available: Yes — a published proof-of-concept exists, as documented in the vendor issue tracker (https://gitee.com/gmg137/snap7-rs/issues/ID2H74).

Given the availability of a public proof-of-concept and the potential for remote execution, this vulnerability requires immediate attention. Organizations should identify all deployments of the snap7-rs library and implement rigorous network segmentation until a verified vendor patch is released and applied.