CVE-2026-82623
CVE-2026-82623 · open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History Backend. The manipulation results in use after free. The attack can be launched remotely. The exploit is now public and may be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.
CVSS 6.9 · Medium · EPSS 0.7%
- Published
- Updated
Stack: system
Affected products and versions
open62541
- Versions
- 1.5.0: Affected
- 1.5.1: Affected
- 1.5.2: Affected
- 1.5.3: Affected
- 1.5.4: Affected
- 1.5.5: Affected
No fix published
open62541 Debian:13
- Versions
- 1.4.11.1-1
- 1.4.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
open62541 Debian:14
- Versions
- 1.4.11.1-1
- 1.4.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
open62541 Ubuntu:26.10
- Versions
- 1.4.11.1-1build1
- 1.4.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
open62541 Ubuntu:26.04:LTS
- Versions
- 1.4.11.1-1
- 1.4.11.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published