CVE-2026-1301 — Out-of-bounds Write in o6 Automation GmbH Open62541
In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process …
Published: 2026-02-05 · CVSS: 6.8 · CVSS 4.0
In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7