CVE-2025-1399: Libplctag

Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds Read vulnerability in unpack_response (session.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.

Affected products

• Libplctag Libplctag: from 2.0, up to and including 2.6.3

Published 2025-05-07. Last modified 2026-06-17.