Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-32994

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softing OPC UA C++ SDK (Software Development Kit)

  • 5.59 to < 5.64affected

References