A heap use-after-free vulnerability in the TransferSubscriptions service
in open62541 may allow an authenticated attacker to cause a denial of
service or potentially execute arbitrary code.
Credits
Abhinav Agarwal reported this vulnerability to CISA.