CVE-2026-116014

High

Description

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA_Client_getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.

SeverityHigh

CVSS8.1

Exploit probability—

ProductOpen62541

PublishedOct 24, 2026

First seenOct 24, 2026

Weakness typeCWE-190Integer overflow

How to fix

Update

open62541 open625411.5.7 or later

Patches

Vendor advisories

github.com/open62541/open62541/releases/tag/v1.5.7

Affected products

Product	Affected versions	Fixed in
open62541 open62541	1.5.0 ≤ v < 1.5.7	1.5.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.