OP
Product
open62541
by open62541 · last CVE Oct 24, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch

Add open62541 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116014
New
8.1
0%
Oct 24
open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
Affected: 1.5.0 before 1.5.7
CVE-2024-53429
7.5
1%
Nov 21
Open62541 v1.4.6 is has an assertion failure in fuzz_binary_decode, which leads to a crash
Affected: 1.4.6
CVE-2022-25761
7.5
1%
Aug 23
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks…
Affected: before 1.2.5; 1.3; 1.3; 1.3; 1.3
CVE-2020-36429
5.5
0%
Jul 20
Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth
Affected: 1.0.0 before 1.0.4
CVE-2026-82623
5.3
1%
Aug 31
open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5
CVE-2026-18785
5.3
0%
Aug 4
o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free
Affected: ca356b088ada7dee824d1b4acd07c1ff07ce242b
CVE-2026-18784
5.3
0%
Aug 4
o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow
Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5
CVE-2026-15690
3.1
0%
Jul 14
open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereference
Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5
Showing 8