This vulnerability involves a use-after-free condition in the open62541 implementation, specifically within the UA_Client_getRemoteDataTypes function of the example client code. Exploitation requires local access and can lead to memory corruption due to use of freed memory. The vulnerability has a CVSS 4.8 (medium) score with low attack vector (local), low complexity, and no user interaction required. The project has not provided an official fix or advisory and closed the issue report as it was not submitted via the official security reporting process.

Successful exploitation can lead to use-after-free memory corruption on the local host, potentially causing application instability or crashes. There is no indication of remote exploitation or privilege escalation. The impact is limited by the requirement for local access and the medium CVSS score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available and the project has not acknowledged the report officially, users should monitor for updates from the vendor. Avoid running untrusted code locally and restrict local access to the affected component as a precaution.