CVE-2026-19259

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMappingvarAccessSpecToObjectReference of the file src/iec61850/common/iec61850common.c of the component MMS Protocol Workflow. Such manipulation of the argument...

CVE-2026-19206 MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow

A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...

EUVD-2026-52017

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...

CVE-2026-18582 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...

CVE-2026-52134

An issue in the parseGoosePayload function /goose/goosereceiver.c of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame...

CVE-2026-63550 MZ Automation libiec61850 Out-of-bounds Read

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...

CVE-2026-56758

The CVE-2026-56758 issue affects the ACSE layer during MMS connection establishment. Specifically, the AARQ PDU parsing of the calling AP title can be broken if an attacker controls a length value of zero or one, causing the parser to read past the end of a heap buffer. Documented impact in the c...

CVE-2026-49035 Stack-based Buffer Overflow in MZ Automation libIEC61850

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

libIEC61850 Pointer Assignment DoS

The vulnerability of the libIEC61850 library is related to errors in pointer assignment. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

libIEC61850 Denial of Service Vulnerability (CNVD-2019-01864)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in Memorymalloc in the hal/memory/libmemory.c file in libIEC61850 version 1.3.1. An attacker can exploit this vulnerability to cause a denial of service memory leak...

Unspecified Vulnerability in libIEC61850

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'ControlObjectClientsetCommandTerminationHandler' function in the client/clientcontrol.c file in libIEC61850 v1.3. An attacker can exploit this vulnerability to obtain SEGV...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. Remediation There is no fixed version for libiec61850. References - Github.com...