CVE-2024-53429: 
Linux Debian vulnerability analysis and mitigation

Open62541 version 1.4.6 contains a vulnerability identified as CVE-2024-53429. The issue was discovered and disclosed on November 21, 2024, affecting the fuzz_binary_decode functionality. The vulnerability manifests as an assertion failure that leads to a crash in the application (NVD, MITRE).

The vulnerability is characterized by an assertion failure in the fuzz_binary_decode function, which results in a crash of the application. The issue has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability has been classified under CWE-617 (Reachable Assertion) (NVD).

When exploited, this vulnerability leads to a denial-of-service condition through application crash. The impact is primarily on the availability of the system, with no direct effect on confidentiality or integrity (GitHub Issue).

The vulnerability can be triggered through specially crafted input to the fuzz_binary_decode function. The issue has been confirmed through fuzz testing using OSS-Fuzz, demonstrating that it is reproducible under controlled conditions (GitHub Issue).