Memory Corruption via Integer Underflow in Message Length Validation

Description

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowing negative or extremely large values to bypass safety checks. This can corrupt memory and potentially allow an attacker to execute arbitrary code on the master system.

Scores

EPSS (exploitation in 30 days)

0.21% · top 88% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.3.

Weakness

• CWE-191 Integer underflow (wrap or wraparound) (opens in a new tab)All about CWE-191 and its CVEs
• CWE-195 Signed to unsigned conversion error (opens in a new tab)All about CWE-195 and its CVEs
• CWE-787 Out-of-bounds write (opens in a new tab)All about CWE-787 and its CVEs

Affected products

• RT-Labs AB · SOEM

  • affected < 2.0.1

References (1)

• https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf (opens in a new tab)vendor-advisory

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-70388](https://trackcve.app/badge/CVE-2026-70388.svg)](https://trackcve.app/cve/CVE-2026-70388)

Record last updated 2 Nov 2026, 18:14 UTC.