CVE-2026-1301

Out-of-bounds Write in o6 Automation GmbH Open62541 PUBLISHED

Description (CNA)

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory.

Affected (CNA)

Vendor / product	Versions
o6 Automation GmbH / Open62541	affected 1.5-rc1 before 1.5-rc2

CWE

CWE-787

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-036-03

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.