OpenS100 vulnerabilities

2 known vulnerabilities in OpenS100 from OpenS100 Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  OpenS100: Heap-based Buffer Overflow

  CVE-2026-35001Oct 13, 2026OpenS100 Project

  OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In t

• 9.6 Critical severity

  OpenS100: Exposed Dangerous Method or Function

  CVE-2026-22208Feb 17, 2026OpenS100 ProjectEPSS 1.1%

  OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL_openlibs() without sandboxing or capability restric