This vulnerability affects the open62541 library versions 1.5.0 to 1.5.5. It is a heap-based buffer overflow in the UA_Client_readNodeClassAttribute function, which can be triggered by local attackers through crafted input. The overflow could potentially lead to memory corruption. The vulnerability requires local access and does not involve user interaction. The project has not provided an official patch or remediation guidance, and the issue report was closed due to reporting policy violations. Public exploit code is available, but no known exploitation in the wild has been reported.

The heap-based buffer overflow could allow a local attacker to corrupt memory, potentially leading to application crashes or other undefined behavior. Given the local attack vector and medium CVSS score, the impact is limited to local privilege escalation or denial of service scenarios. There is no indication of remote exploitation or widespread active exploitation.

No official patch or remediation has been provided by the vendor. Users should monitor the vendor's official channels for any future updates or fixes. Since exploitation requires local access, restricting local user permissions and access to the vulnerable software can reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.