Threats tagged 'ghsa-wj27-rfm4-9hp4'

CVE-2026-90782 is a medium severity vulnerability in Systerel S2OPC up to version 1.7.3. It involves a null pointer dereference in the function msg_subscription_publish_bs__alloc_notification_message_items(). This occurs when a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList, allowing attackers to trigger heap allocation failures. Exploitation can cause the server process to terminate, resulting in a denial of service.