Debevv vulnerabilities
We track 4 vulnerabilities in Debevv products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest Debevv vulnerabilities
- 9.8 Critical severity
nanoMODBUS: Out-of-bounds Read
nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_device_identification_res in nanomodbus.c. A fixed 3-element stack array order[3] = {0,1,2} maps object IDs to
- 8.6 High severity
nanoMODBUS: Out-of-bounds Write
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only
- 9.8 Critical severity
nanoMODBUS: Out-of-bounds Write
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-re
- 8.6 High severity
nanoMODBUS: Off-by-one Error
nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending