CVE-2026-61893

The CVE-2026-61893 entry concerns the MZ Automation lib60870 library. A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer, indicating an out-of-bounds read in...