CVE-2026-82944

The record

SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers. The software checks the total size only once at the beginning, but doesn't track the cumulative size as multiple segments arrive. An attacker can declare a small initial size to pass validation, then send additional segments that exceed the allocated buffer. This allows the attacker to write controlled data beyond buffer boundaries, potentially enabling code execution.

Affected packages

Related vulnerabilities

• CVE-2026-121603 Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that… CWE-120
• CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with… CWE-120
• CVE-2026-76955 A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions… CWE-120
• CVE-2026-120057 psqlODBC copies the reply to a large-object read (loread) into the application's buffer… CWE-120
• CVE-2026-106804 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn… CWE-120
• CVE-2026-120241 A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC… CWE-120
• CVE-2026-120226 A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll… CWE-120
• CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the… CWE-120