Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-27274
• https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03