An integer overflow vulnerability (CWE-190) exists in the UA_Variant arrayDimensions product computation in the open62541 library maintained by o6 Automation. This flaw can be triggered remotely by an attacker with low privileges, resulting in an out-of-bounds write condition. The vulnerability affects versions 1.3.0, 1.4.0, and 1.5.0 of open62541. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no user interaction, and impacts to confidentiality, integrity, and availability. No vendor advisory or patch is currently published, and no known exploits have been reported.

Successful exploitation of this integer overflow vulnerability can lead to an out-of-bounds write, which may allow an attacker to execute arbitrary code or cause denial of service. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. The attack requires network access and low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected open62541 instances and monitor for unusual behavior. Avoid deploying affected versions in untrusted environments.