The vulnerability in libiec61850 arises from improper handling of specific parameters in the ISO Presentation layer. A missing length check on encoded presentation data allows an attacker to supply a zero-length field that triggers a bounded heap overread. This overread happens during the TCP/102 connection attempt phase, prior to MMS session establishment, leading to process termination and denial of service. The CVSS v3.1 score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Successful exploitation causes the affected process to terminate unexpectedly, resulting in a denial of service condition. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is currently available. Until a patch is released, consider restricting or monitoring TCP/102 connections to the affected service to reduce exposure.