Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-1301

Out-of-bounds Write in o6 Automation GmbH Open62541

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

o6 Automation GmbH Open62541

Default version status: unaffected

  • 1.5-rc1 to < 1.5-rc2affected

References