This vulnerability in open62541 v1.5.5 involves a buffer overflow triggered during the validation of input arguments in the Service_Call function. The validation process relies on runtime-resolved InputArguments metadata, which can be manipulated by a remote attacker to cause a denial of service. The CVSS v3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There is no information on available patches or vendor advisories, and no known exploits in the wild have been reported.

A remote attacker can cause a denial of service condition by exploiting this buffer overflow vulnerability. There is no indication of confidentiality or integrity impact. The attack can be performed without authentication or user interaction, making it relatively easy to exploit remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.