CVE-2026-90782 Details
Description
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.
A null pointer dereference vulnerability has been identified in S2OPC versions through 1.7.3. The issue arises in the function 'msg_subscription_publish_bs__alloc_notification_message_items()', where a failed allocation for 'DataChangeNotification' is overwritten by a successful allocation for 'EventNotificationList'. This flaw can be exploited by causing heap allocation failures on sessions that handle both data-change and event notifications, leading to a crash of the server process.
Users are advised to update to S2OPC version 2.0.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 13, 2026CISA-ADP
Assessed Sep 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gitlab.com/systerel/S2OPC/-/issues/1815 | CISA-ADP | Issue TrackingTechnical DescriptionVendor |
| https://gitlab.com/systerel/S2OPC | [email protected] | Vendor |
| https://gitlab.com/systerel/S2OPC/-/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/b2c/msg_subscription_publish_bs.c#L106-L147 | [email protected] | Source CodeVendor |
| https://gitlab.com/systerel/S2OPC/-/commit/8848f051eed069b107ae7cb16a346d6f6386a8f5 | [email protected] | Source CodeVendor |
| https://gitlab.com/systerel/S2OPC/-/issues/1815 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://gitlab.com/systerel/S2OPC/-/merge_requests/1862 | [email protected] | Issue TrackingVendor |
| https://www.vulncheck.com/advisories/s2opc-through-1.7.3-null-pointer-dereference-in-alloc-notification-message-items | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Systerel S2OPC | <= 1.7.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 14, 2026 | CVE Modified | CISA-ADP |
| Sep 13, 2026 | New CVE Received | [email protected] |