open62541 vulnerabilities

CVEs whose affected-version data names the open62541 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116014High· 8.1

today

open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via…

▾ Twilightopen62541 · open62541via CVEORG