Integer Overflow Vulnerability in open62541 Affects DataType Handling in OPC UA Clients
CVE-2026-116014

9.2CRITICAL

Key Information:

Vendor

Open62541

Status
Open62541
Vendor
CVE Published:
24 October 2026

What is CVE-2026-116014?

An integer overflow vulnerability exists in open62541 versions 1.5.0 through 1.5.6, specifically within the UA_DataType_fromStructureDescription() function. This flaw allows a malicious OPC UA server to provide malicious DataType definitions, which can be triggered via the UA_Client_getRemoteDataTypes() method. If exploited, the resulting overflow impacts the heap during the decodeBinaryStructure() process, potentially leading to crashes of OPC UA clients or even unauthorized code execution.

Affected Version(s)

open62541 1.5.0 < 1.5.7

References

https://github.com/open62541/open62541/commit/0cf4806768c...
patch
https://github.com/open62541/open62541/pull/8298
patchissue-tracking
https://github.com/open62541/open62541/pull/8302
patchissue-tracking

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

BUG|PWN Research
Sadoc ADONON
.