CVE-2026-82619: Use After Free in Systerel S2OPC

This vulnerability in Systerel S2OPC up to version 1.7.3 is a use-after-free condition triggered by manipulation of the EventFilter argument in the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result located in src/ClientServer/services/bgenc/subscription_mgr.c. The flaw allows remote attackers to exploit the use-after-free, potentially leading to undefined behavior or memory corruption. A patch addressing this issue is available under the commit hash a4cee16a851b971be447a6ed531173702c722b99. The CVSS 4.0 base score is 5.3, indicating medium severity.

The vulnerability allows remote attackers to trigger a use-after-free condition, which can lead to memory corruption or application instability. The CVSS score of 5.3 reflects a medium severity impact with low attack complexity and no required privileges or user interaction. No known active exploitation in the wild has been reported.

A patch identified by commit a4cee16a851b971be447a6ed531173702c722b99 is available and applying it is the recommended remediation. Since the vulnerability is in a non-cloud product, users should update affected versions to a fixed release containing this patch. Patch status is not explicitly confirmed in the advisory, so users should verify the vendor's official advisory or repository for the fixed version.