CVE-2026-82618: Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-31 · updated 2026-08-31
Weakness: CWE-119

Description

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_builtintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Systerel S2OPC: 1.7.0, 1.7.1, 1.7.2, 1.7.3

References

https://gitlab.com/systerel/S2OPC/-/work_items/1796
https://vuldb.com/cve/CVE-2026-82618
https://vuldb.com/submit/893095
https://vuldb.com/vuln/397118
https://vuldb.com/vuln/397118/cti
https://gitlab.com/systerel/S2OPC/-/work_items/1796
https://vuldb.com/submit/893095

Get alerted when CVE-2026-82618 or the next vulnerability affects your stack