CVE-2026-90782
S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.
| CWE | CWE-476 |
| Vendor | systerel |
| Product | s2opc |
| Published | Sep 13, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for systerel s2opc
Be the first to know when new medium vulnerabilities affecting systerel s2opc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Systerel / S2OPC
0 ≤ 1.7.3
References
gitlab.com: https://gitlab.com/systerel/S2OPC/-/issues/1815 gitlab.com: https://gitlab.com/systerel/S2OPC/-/commit/8848f051eed069b107ae7cb16a346d6f6386a8f5 gitlab.com: https://gitlab.com/systerel/S2OPC/-/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/b2c/msg_subscription_publish_bs.c#L106-L147 gitlab.com: https://gitlab.com/systerel/S2OPC gitlab.com: https://gitlab.com/systerel/S2OPC/-/merge_requests/1862 vulncheck.com: https://www.vulncheck.com/advisories/s2opc-through-1.7.3-null-pointer-dereference-in-alloc-notification-message-items
Credits
Harsh Raj Singhania