CVE-2026-18785

MEDIUM

o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free

Title source: cna
STIX 2.1

Description

A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of the file examples/custom_datatype/client_types_custom.c. Executing a manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-385787 | o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free
https://vuldb.com/vuln/385787
Signature, Permissions Required signature permissions-required
VDB-385787 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/385787/cti
Third Party Advisory third-party-advisory
CVE-2026-18785 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-18785
Third Party Advisory third-party-advisory
Submit #857052 | open62541 Project open62541 master (commit ca356b088ada7dee824d1b4acd07c1ff07ce242b) Uncontrolled Recursion (Stack Overflow)
https://vuldb.com/submit/857052
Exploit exploit issue-tracking
https://github.com/gff-cw/information/issues/12

Scores

CVSS v3 5.3
EPSS 0.0011
EPSS Percentile 1.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-416
Status published
Products (1)
o6/open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b
Published Aug 04, 2026
Tracked Since Aug 04, 2026