Open62541 Open62541 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Open62541 Open62541: 1 record(s), with affected versions and fixes.

CVE-2026-116014 High · 8.1 CWE-190 Oct 24, 2026

open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA_Client_getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.