CVE-2026-82947 Multiple Out-of-Bounds Reads in Frame Processing
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-82947?
CVE-2026-82947 is a high-severity vulnerability in RT-Labs AB SOEM, published on 26 Oct 2026.
Official description
SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.
Which versions are affected by CVE-2026-82947?
How do I fix CVE-2026-82947?
No fix has been published for CVE-2026-82947 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-82947 being exploited?
There is no known exploitation of CVE-2026-82947 in the wild and no public exploit code.
Sources
Also known as GHSA-fq96-jx7g-9639.