Out-of-Bounds Read Vulnerability in S2OPC by Systerel
CVE-2026-67865

7.5HIGH

Key Information:

Vendor

Systerel

Status
S2OPC
Vendor
CVE Published:
5 August 2026

What is CVE-2026-67865?

The S2OPC 1.7.3 version contains a vulnerability that allows an out-of-bounds read during the handling of RepublishResponse requests. This enables a remote attacker to exploit the flaw, potentially leading to a denial of service. The specific code areas impacted include msg_subscription_publish_bs.c and related components in the S2OPC Toolkit, making this an important issue for users relying on this framework.

References

https://gitlab.com/systerel/S2OPC/-/work_items/1785
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.