CVE-2026-65423

Received Received - Intake

Integer Overflow in open62541 UA_Variant ArrayDimensions

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: ICS-CERT

Description

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-30

Generated

2026-07-31

AI Q&A

2026-07-31

EPSS Evaluated

N/A

NVD

CVE-2026-65423

EUVD

EUVD-2026-51335

Affected Vendors & Products

Vendor	Product	Version / Range
open62541	ua_variant	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability is an integer overflow in the UA_Variant arrayDimensions product computation in open62541. It may allow a remote attacker to trigger an out-of-bounds write, potentially leading to memory corruption or arbitrary code execution.

Impact Analysis

An attacker could exploit this to cause crashes, execute malicious code, or gain unauthorized access to systems running vulnerable versions of open62541. The high CVSS scores indicate significant impact on confidentiality, integrity, and availability.

Compliance Impact

The vulnerability involves an integer overflow leading to an out-of-bounds write, which could allow remote attackers to execute arbitrary code or cause denial of service. This could compromise data integrity and availability, potentially violating GDPR's requirements for data protection and HIPAA's safeguards for protected health information.

Mitigation Strategies

Update open62541 to the latest version to address the integer overflow in UA_Variant arrayDimensions computation. Monitor vendor advisories for patches and apply them promptly.

Hi! I’m here to help you understand CVE-2026-65423. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70