p PatchFirst

CVE-2026-63559

CVE-2026-63559 · o6 Automation open62541 Integer Overflow or Wraparound

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.

CVSS 8.7 · High · EPSS 0.7%

Published
Updated

Stack: system

Affected products and versions

  • open62541

    Versions
    • ≥ 1.3.0, ≤ 1.3.17: Affected (custom)
    • ≥ 1.4.0, ≤ 1.4.16: Affected (custom)
    • ≥ 1.5.0, ≤ 1.5.4: Affected (custom)
    • master: Affected

    No fix published

  • open62541 Debian:13

    Versions
    • 1.4.11.1-1
    • 1.4.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • open62541 Debian:14

    Versions
    • 1.4.11.1-1
    • 1.4.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • open62541 Ubuntu:26.10

    Versions
    • 1.4.11.1-1build1
    • 1.4.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • open62541 Ubuntu:26.04:LTS

    Versions
    • 1.4.11.1-1
    • 1.4.11.1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →