CVE-2026-67863
Description
A flaw was found in open62541. A server-side use-after-free vulnerability exists in the local MonitoredItem callback path. This occurs when the system attempts to use a notification object after it has been deallocated. A remote attacker can exploit this vulnerability to cause a denial of service (DoS), making the affected system unavailable.
Statement
This Important flaw in open62541 allows a remote attacker to trigger a denial of service due to a use-after-free vulnerability in the server's MonitoredItem callback path. The issue arises from improper handling of notification objects after deallocation, leading to service unavailability. This is considered Important due to the potential for unauthenticated remote denial of service against affected open62541 server instances.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
