Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-05T00:00:00 open62541: open62541: Denial of Service via buffer overflow in Service_Call 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-125

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata

A flaw was found in open62541. A remote attacker can exploit a buffer overflow vulnerability within the Service_Call function. This vulnerability arises from improper validation of input arguments against runtime-resolved InputArguments metadata, which can lead to a denial of service (DoS).

This Important flaw in open62541 allows a remote, unauthenticated attacker to trigger a denial of service. The vulnerability stems from insufficient validation of input arguments within the Service_Call function, which can lead to a buffer overflow and subsequent service unavailability. No practical workaround identified beyond restricting NodeManagement / method-metadata changes to trusted principals and limiting network exposure of the OPC UA server. https://www.cve.org/CVERecord?id=CVE-2026-67869 https://nvd.nist.gov/vuln/detail/CVE-2026-67869 https://github.com/open62541/open62541/blob/v1.5.5/examples/tutorial_server_alarms_conditions.c https://github.com/open62541/open62541/blob/v1.5.5/src/server/ua_services_method.c https://github.com/open62541/open62541/blob/v1.5.5/src/server/ua_subscription_alarms_conditions.c https://github.com/open62541/open62541/issues/8171