#1153264 open62541: CVE-2026-82623

Package:
src:open62541
Source:
src:open62541
Submitter:
Moritz Mühlenhoff
Date:
2026-11-06 20:33:02 UTC
Severity:
normal
Tags:
#1153264#5
Date:
2026-11-06 20:17:22 UTC
From:
To:
Hi,

The following vulnerability was published for open62541.

CVE-2026-82623[0]:
| A vulnerability was detected in open62541 up to 1.5.5. Affected by
| this vulnerability is the function UA_DataValue_backend_copyRange of
| the file plugins/historydata/ua_history_data_backend_memory.c of the
| component History Backend. The manipulation results in use after
| free. The attack can be launched remotely. The exploit is now public
| and may be used. The project closed the issue report, stating that
| this is not the official way to report a security vulnerability.

https://github.com/open62541/open62541/issues/8199


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-82623
https://www.cve.org/CVERecord?id=CVE-2026-82623

Please adjust the affected versions in the BTS as needed.