CVE-2026-82618: Out-of-Bounds Read in Systerel S2OPC

This vulnerability affects Systerel S2OPC up to version 1.7.3 in the function set_range_matrix_on_string_array located in src/Common/opcua_types/sopc_builtintypes.c. The issue causes an out-of-bounds read when manipulating string array ranges. The vulnerability is remotely exploitable and does not require user interaction or elevated privileges. The project was informed early but has not issued a fix or official response as of the publication date.

An attacker can remotely trigger an out-of-bounds read condition, potentially leading to information disclosure or application instability. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the affected component to trusted sources if feasible.