CVE-2026-67857 | BDVDB-2026-355192 Detail
Description#
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
- https://github.com/open62541/open62541/issues/8104
- https://github.com/open62541/open62541/blob/v1.5.5/src/client/ua_client_connect.c
- https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect.c
- https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect_loop.c
- https://github.com/gff-cw/information/issues/9
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.