Vulnerabilidades de Open62541
CVEs publicadas que afetam produtos de Open62541: 1 registro(s), com severidade, exploração e correções.
CVE-2026-116014
Alta · 8.1
CWE-190 24/10/2026
open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA_Client_getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.