The vulnerability exists in the ACSE layer of libiec61850, specifically in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker can supply a length value of zero or one that causes the parser to read beyond the allocated heap buffer boundary. This is classified as a CWE-125 (Out-of-bounds Read) vulnerability. The CVSS v3.1 base score is 6.5, reflecting an attack vector over the network with low complexity, no privileges required, no user interaction, and an impact limited to availability.

Successful exploitation can cause the parser to read past the end of a heap buffer, which may lead to application crashes or denial of service conditions affecting availability. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is currently documented. Users should monitor vendor communications for updates and apply patches once available.