Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-25075 EUVD-2024-22437GHSA-v7xc-2fvf-cc6x

An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish paramete…

Published Apr 2, 2024 · Updated Nov 21, 2024 · Assigned by mitre

Description

An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service.

References