Description
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata
Published: 2026-08-05
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a buffer overflow in open62541 v1.5.5 that allows a remote attacker to trigger a denial of service by sending crafted input to the Service_Call function, which validates arguments against runtime‑resolved InputArguments metadata.

Affected Systems

The flaw affects the open62541 OPC UA library, specifically version 1.5.5, used in server implementations that expose Service_Call operations.

Risk and Exploitability

The CVSS score of 7.5 indicates moderate to high severity. The EPSS score is below 1%, implying a low likelihood of exploitation, and the issue is not listed in the CISA KEV catalog. The likely attack vector is remote over the network via Service_Call, as inferred from the description.

Generated by OpenCVE AI on August 6, 2026 at 16:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the open62541 library to a patched version that resolves the buffer overflow.
  • Restrict or firewall access to OPC UA Service_Call endpoints so that only trusted hosts can invoke them.
  • If an immediate update is not possible, enforce input argument size limits or other input validation to mitigate the overflow potential.

Generated by OpenCVE AI on August 6, 2026 at 16:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 06 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787

Thu, 06 Aug 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 06 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in open62541 1.5.5 Enables Remote DoS via Service_Call open62541: open62541: Denial of Service via buffer overflow in Service_Call
Weaknesses CWE-125
References
Metrics threat_severity

None

 threat_severity

Important

Thu, 06 Aug 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Open62541
Open62541 open62541
Vendors & Products Open62541
Open62541 open62541

Thu, 06 Aug 2026 00:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in open62541 1.5.5 Enables Remote DoS via Service_Call
Weaknesses CWE-120
CWE-787

Wed, 05 Aug 2026 23:30:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N'}

Subscriptions

Open62541 Open62541
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-06T12:37:55.035Z

Reserved: 2026-07-30T00:00:00.000Z

Link: CVE-2026-67869

cve-icon Vulnrichment

Updated: 2026-08-06T12:37:46.590Z

cve-icon NVD

Status : Received

Published: 2026-08-06T00:16:53.900

Modified: 2026-08-06T13:18:23.103

Link: CVE-2026-67869

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-05T00:00:00Z

Links: CVE-2026-67869 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T17:00:11Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-125

    Out-of-bounds Read