CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/isomms/server/mmsreadservice.c does not validate an alternate-access sub-array range when numberOfElements is...

CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/isomms/server/mmsreadservice.c does not validate an alternate-access sub-array range when numberOfElements is...

CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/isomms/server/mmsreadservice.c does not validate an alternate-access sub-array range when numberOfElements is...

CVE-2026-48741

The libIEC61850 open-source library, which implements IEC 61850 protocols such as MMS, contains a NULL pointer dereference vulnerability in the alternateArrayAccess function located in src/mms/iso_mms/server/mms_read_service.c. This flaw exists because the software fails to validate the sub-array...

PT-2026-115638

Name of the Vulnerable Software and Affected Versions libIEC61850 versions prior to 1.6.2 Description The alternateArrayAccess function in src/mms/iso mms/server/mms read service.c fails to validate the alternate-access sub-array range when the numberOfElements variable is greater than zero. This...