The libiec61850 library's GOOSE parser contains an off-by-one error in boundary handling that can be exploited by sending a specially crafted unauthenticated Layer-2 multicast frame. This causes the parser to incorrectly advance its internal buffer pointer, triggering a heap out-of-bounds read. The consequence on affected platforms is a reliable termination of the subscriber process, resulting in denial-of-service. There is no indication of code execution or data compromise. No patch or official remediation level has been provided as of the publication date.

Successful exploitation causes a denial-of-service condition by terminating the subscriber process due to a heap out-of-bounds read. There is no reported impact on confidentiality or integrity of data. The vulnerability affects availability of the service relying on the libiec61850 GOOSE parser.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider network-level controls to restrict unauthenticated Layer-2 multicast frames from untrusted sources on the process bus to reduce exposure.