CVE-2026-82618

MEDIUM 4.3

Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_builtintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-125 CWE-119
Vendor	systerel
Product	s2opc
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for systerel s2opc

Be the first to know when new medium vulnerabilities affecting systerel s2opc are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Systerel / S2OPC

1.7.0 1.7.1 1.7.2 1.7.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397118 vuldb.com: https://vuldb.com/vuln/397118/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82618 vuldb.com: https://vuldb.com/submit/893095 gitlab.com: https://gitlab.com/systerel/S2OPC/-/work_items/1796

Credits

🔍 Carnegie (VulDB User) VulDB CNA Team