This vulnerability is a heap out-of-bounds read (CWE-125) in the MMS BER decoder component of libiec61850. The flaw occurs due to incorrect advancement of the internal read position when processing crafted BER-encoded elements within confirmed-request messages over MMS sessions on TCP port 102. The out-of-bounds read causes the MMS handling process to crash, resulting in denial-of-service. There is no indication of confidentiality or integrity impact. No patch or official remediation has been published as of the data provided.

Successful exploitation causes a denial-of-service condition by crashing the MMS handling process. There is no reported impact on confidentiality or integrity. The vulnerability requires an attacker with at least low privileges to send crafted BER-encoded messages over an established MMS session. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to MMS services on TCP port 102 to trusted entities and monitor for unusual session activity. No official fix or temporary workaround has been published.