CVE-2026-82947: Multiple Out-of-Bounds Reads in Frame Processing
SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
SOEM masters running version 2.0.0 or earlier are affected when they process messages from a malicious device. The issue is in the master's frame processing rather than requiring compromise of a user interface.
What does an attacker need to exploit this?
An attacker needs adjacent-network access and the ability to provide crafted device messages to the SOEM master. No privileges or user interaction are required according to the supplied vector.
How can I determine whether my environment is affected?
Identify SOEM instances used as masters and verify their version. Instances running SOEM 2.0.0 or earlier should be treated as affected, particularly if they communicate with devices that are not fully trusted.