CVE-2026-67857

CVE-2026-67857

A flaw was found in open62541. A remote attacker could exploit an out-of-bounds read vulnerability in the client-side function responseReadNamespacesArray() by sending a specially crafted network packet. This could lead to a denial of service, causing the application to crash and become unavailable.

CVE-2026-67857

open62541 1.5.5 contains an out-of-bounds read in the client-side func ...

GHSA-2mh5-cmr8-pwvp

open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.