CVE-2026-82947
High · 7.1CVSS
7.1
EPSS
0.2%
Published
Oct 26, 2026
CISA due date
—
The record
SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118237 An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git… CWE-125
- CVE-2026-121208 Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-125
- CVE-2026-121197 Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a… CWE-125
- CVE-2026-121184 Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-125
- CVE-2026-121160 Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-125
- CVE-2026-121140 Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-125
- CVE-2026-121112 Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a… CWE-125
- CVE-2026-121093 Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-125