Memory Corruption Vulnerability in SOEM Software by RT Labs

CVE-2026-82945

What is CVE-2026-82945?

The SOEM software, specifically version 2.0.0 and preceding versions, is susceptible to a serious vulnerability during device configuration. This occurs when an attacker uses a malicious device to exploit a flaw in memory management. The software inadequately handles configuration data by writing to a fixed-size array without validating if the array index stays within the defined limit of EC_MAXFMMU entries. Consequently, if a device provides more configuration blocks than permitted, it can overwrite memory boundaries, resulting in memory corruption. This compromise may lead to severe disruptions in system operations and pose a significant security risk.

References