Threats tagged 'ghsa-36pq-cx6x-rc54'

A heap-based buffer overflow vulnerability exists in MZ Automation libiec61850 up to version 1.6.1 in the function MmsMapping_varAccessSpecToObjectReference within the MMS Protocol Workflow component. The flaw arises from improper handling of the argument GetNamedVariableListAttributesResponse.itemId. Exploitation requires local access. Public exploit details have been disclosed, but the project has not yet responded with a fix.