Libmodbus vulnerabilities
We track 3 vulnerabilities in Libmodbus products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2025.
Latest Libmodbus vulnerabilities
- 9.8 Critical severity
libmodbus: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.
- 7.5 High severity
libmodbus: Use After Free
libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.
- 7.5 High severity
libmodbus: Buffer Copy without Checking Size of Input
libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially crafted input, which leads to out-of-bounds read and can potentially cause a crash or other unintended be