PT-2026-122595
CVE-2026-116014
·
Published
2026-10-24
·
Updated
2026-10-24
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA DataType fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA Client getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾