Open62541: Heap-buffer-overflow
Affects open62541Source GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 187849f2d3c64083427722cbdd106cb03c9e6192, 2c4a1975c337e153da3fc661463c9ddcf8a03634
Data as of 27 Oct 2026, 02:05 UTC
What to do
Upgrade open62541 to 187849f2d3c64083427722cbdd106cb03c9e6192 or 2c4a1975c337e153da3fc661463c9ddcf8a03634.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzopen62541pkg:generic/open62541Other threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been applied in specific commits. Users of open62541 should update to versions that include these fixes to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
Description
A heap-buffer-overflow vulnerability exists in the _rrparse function of the open62541 library, as reported by OSS-Fuzz. This issue involves an out-of-bounds read of 16 bytes during message parsing in fuzz_mdns_message.cc. Multiple versions of open62541 are affected, and patches have been committed to fix the flaw.