Threat Intelligence Database

A heap-based buffer overflow vulnerability exists in MZ Automation libiec61850 up to version 1.6.1 in the function MmsMapping_varAccessSpecToObjectReference within the MMS Protocol Workflow component. The vulnerability arises from manipulation of the argument GetNamedVariableListAttributesResponse.itemId. Exploitation requires local access and no user interaction. The issue has been publicly disclosed, but no patch or vendor response is currently available.

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReference of the file src/iec61850/common/iec61850_common.c of the component MMS Protocol Workflow. Such manipulation of the argument GetNamedVariableListAttributesResponse.itemId leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A heap-based buffer overflow vulnerability exists in MZ Automation libiec61850 versions 1.6.0 and 1.6.1 in the SVReceiver_stopThreadless function of the ASDU Element Handler component. The flaw can be triggered by a local attacker manipulating the affected function. Exploit code has been publicly released. Upgrading to version 1.6.2 mitigates the issue.

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected component is advised.

CVE-2026-19108 is a use-after-free vulnerability in MZ Automation libiec61850 versions 1.6.0 and 1.6.1. It affects the function deleteDataSetValuesShadowBuffer in the URCB Revalidation component. The vulnerability requires local access to exploit and has a medium severity score of 4.8. An exploit has been publicly disclosed. Upgrading to version 1.6.2 addresses the issue.

CVE-2026-18583 is a medium severity vulnerability in mz-automation libiec61850 versions 1.6.0 and 1.6.1. It involves an out-of-bounds read in the checkDataSetAccess function of the MMS Request Handler component. The vulnerability can be triggered remotely without authentication. A public exploit is available. Upgrading to version 1.6.2 addresses the issue.

CVE-2026-18582 is a medium severity vulnerability in mz-automation libiec61850 versions 1.6.0 and 1.6.1. It involves a flaw in the Reporting_RCBWriteAccessHandler function that causes a free of memory not on the heap, which can be exploited remotely. A public exploit exists. Upgrading to version 1.6.2 resolves the issue.

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request.

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. The vulnerability manifests as SEGV and causes the application to crash

HighVulnerabilityUnited StatesGermanyFrance+8#cve#cve-2024-28286