CVE-2026-90782: S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
Published Sep 13, 2026
·Updated
S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.
Affected Software
1 affected component
S2OPC S2OPC<=1.7.3
Event History
Sep 13, 2026
CVE Published
via MITRE·12:22 PM
Data Sourced
via MITRE·12:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which S2OPC deployments are exposed?
S2OPC versions through 1.7.3 are affected when a session has both data-change notifications and event notifications.
2
What does an attacker need to exploit this issue?
The attack is network-reachable but requires low-level privileges and high attack complexity. The attacker must be able to trigger heap allocation failures in an affected session with both notification types.