CVE-2026-67860

open62541: open62541: Heap-based buffer overflow in HistoryRead path

View on CVE.org
Published Aug 4, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Heap-Based Buffer Overflow in Default History Read Path of open62541 1.5.5 open62541: open62541: Heap-based buffer overflow in HistoryRead path
Weaknesses CWE-120
References
Metrics threat_severity

None

 threat_severity

Important
Type Values Removed Values Added
Title Heap-Based Buffer Overflow in Default History Read Path of open62541 1.5.5
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Weaknesses CWE-122
Type Values Removed Values Added
First Time appeared Open62541
Open62541 open62541
Vendors & Products Open62541
Open62541 open62541
Type Values Removed Values Added
Description open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend.
References
Earlier changes (1)
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2026, 6:34 PM
Reserved
Jul 30, 2026, 12:00 AM

View source JSON

Updated
Aug 5, 2026, 6:34 PM

JSON

Status
Deferred
Published
Aug 4, 2026, 10:17 PM
Modified
Aug 31, 2026, 7:33 PM

View source JSON

Severity
Important
Public date
Aug 4, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Aug 11, 2026, 2:15 AM

JSON