{"id":"CVE-2026-67857","published":"2026-08-04T22:17:15.957","lastModified":"2026-08-05T15:17:06.167","description":"open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/gff-cw/information/issues/9","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect_loop.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/src/client/ua_client_connect.c","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8104","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8104","tags":[]}],"exploitRefs":[{"url":"https://github.com/gff-cw/information/issues/9","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/examples/client_connect_loop.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/v1.5.5/src/client/ua_client_connect.c","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8104","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8104","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows out-of-bounds read in open62541 1.5.5, potentially leading to information disclosure. It matters because attackers can exploit this to gain sensitive data.","exploitability":"Exploitation requires specific client-side interaction but is considered feasible by skilled adversaries.","blast_radius":"If exploited, it could impact systems using open62541 for industrial control or critical infrastructure, leading to potential operational disruptions.","remediation":"Update to open62541 version 1.6.0 or later which addresses this vulnerability.","tags":["ics","info-disc","client-side"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:55:24.344Z"}}