Skip to content
Heist/ feed
Unrated

DEBIAN-CVE-2026-82623

Type: advisorySource: OSV1 source record

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History Backend. The manipulation results in use after free. The attack can be launched remotely. The exploit is now public and may be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

Announced Source revision 1
Original source ↗

DEBIAN-CVE-2026-82623

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:DEBIAN-CVE-2026-82623

open62541

Source reference: /affected/0/package/name

Affected versions
1.4.11.1-1

Source reference: /affected/0/versions

1.4.18-1

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

open62541

Source reference: /affected/1/package/name

Affected versions
1.4.11.1-1

Source reference: /affected/1/versions

1.4.18-1

Source reference: /affected/1/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "open62541",
      "purl": "pkg:deb/debian/open62541?arch=source&distro=trixie",
      "ecosystem": "Debian:13"
    },
    "versions": [
      "1.4.11.1-1",
      "1.4.18-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82623.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "open62541",
      "purl": "pkg:deb/debian/open62541?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "1.4.11.1-1",
      "1.4.18-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82623.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#58222 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement