CVE-2026-116014

A flaw was found in open62541. This vulnerability allows a malicious Open Platform Communications Unified Architecture OPC UA server to trigger arbitrary code execution or a Denial of Service DoS on connecting client applications. By supplying specially crafted, oversized custom data type...

UBUNTU-CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

DEBIAN-CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

EUVD-2026-109272

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

The open62541 library (versions 1.5.0 before 1.5.7 ) is vulnerable to an integer overflow within the UA_DataType_fromStructureDescription() function. The flaw occurs when the 16-bit memSize field is wrapped during the processing of large custom structure definitions. A malicious OPC UA server can...

CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

Open62541 Digital error vulnerability

In versions prior to 1.5.7 of Open62541, there is a numeric error vulnerability. This vulnerability arises because UADataTypefromStructureDescription experiences an integer overflow when processing large custom structure definitions; it then wraps around the 16-bit memSize field. A malicious OPC ...

PT-2026-122595

Name of the Vulnerable Software and Affected Versions open62541 versions 1.5.0 through 1.5.6 Description An integer overflow exists in the UA DataType fromStructureDescription function that affects the 16-bit memSize field when processing large custom structure definitions. A malicious OPC UA...

Linux Distros Unpatched Vulnerability : CVE-2026-116014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure...

open62541:fuzz_msg_message: Use-of-uninitialized-value in nodeIdOrder

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6420702291623936 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgmessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

open62541:fuzz_msg_message: Heap-use-after-free in processRequest

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6046591337955328 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmsgmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

open62541:fuzz_process_request_15: Heap-buffer-overflow in getLocalizedForSession

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5570307021406208 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocessrequest15 Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

[SECURITY] Fedora 43 Update: open62541-1.5.8-1.fc43

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...

[SECURITY] Fedora 44 Update: open62541-1.5.8-1.fc44

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...

[SECURITY] Fedora 45 Update: open62541-1.5.8-1.fc45

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...