DEBIAN-CVE-2026-82623
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History Backend. The manipulation results in use after free. The attack can be launched remotely. The exploit is now public and may be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.
DEBIAN-CVE-2026-82623
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:DEBIAN-CVE-2026-82623
open62541
Source reference: /affected/0/package/name
- Affected versions
- 1.4.11.1-1
Source reference:
/affected/0/versions1.4.18-1Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
open62541
Source reference: /affected/1/package/name
- Affected versions
- 1.4.11.1-1
Source reference:
/affected/1/versions1.4.18-1Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "open62541",
"purl": "pkg:deb/debian/open62541?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"1.4.11.1-1",
"1.4.18-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82623.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "open62541",
"purl": "pkg:deb/debian/open62541?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"1.4.11.1-1",
"1.4.18-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82623.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #58222 · Revision 1
- Added to Heist Feed
- Publisher date