CyberRota Analysis
AI-GeneratedS2OPC versions up to 1.7.3 are vulnerable to a null pointer dereference that can lead to server process termination when attackers exploit heap allocation failures during sessions with both data-change and event notifications. This vulnerability could disrupt service availability, making it critical for organizations using S2OPC to prioritize patching or mitigating this issue to maintain operational integrity. Users in industrial automation and IoT environments should be particularly vigilant due to the potential impact on system stability.
Original NVD Description
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.