This vulnerability in open62541 versions 1.5.0 to 1.5.5 involves a heap-based buffer overflow in the UA_Client_readNodeClassAttribute function. An attacker with local access can manipulate this function to cause memory corruption. The project has not provided an official fix or remediation and closed the issue report, stating the report was not submitted through official channels. The CVSS 4.8 score reflects a medium severity with local attack vector and low complexity. Exploit code is publicly available, but no active exploitation is confirmed.

Successful exploitation could lead to heap memory corruption, potentially causing application crashes or other unintended behavior. Since the attack requires local access and privileges, remote exploitation is not feasible. No confirmed active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's official channels for any future updates or fixes. Until a fix is provided, restricting local access and applying standard security controls to limit local user privileges may reduce risk.