CVE Intelligence

Open62541 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Open62541 products: 1 record(s), with severity, exploitation and fixes.

Open62541 1

Exploited only (KEV) →

CVE-2026-116014 High · 8.1 CWE-190 Oct 24, 2026
open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA_Client_getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.