High · 7.5 CVE-2026-67862 EUVD-2026-52996GHSA-vqxw-7v8h-rvf2

open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a rem…

Published Aug 4, 2026 · Updated Aug 5, 2026 · Assigned by mitre

Package: open62541 Package: open62541 Ecosystem: Debian Ecosystem: Ubuntu

Description

open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to cause a denial of service.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	open62541	No fix yet	—
Debian 13	open62541	No fix yet	—

Ubuntu