Libiec61850
Approved changes feed: RSS · Atom
cpe:2.3:a:mz_automation:libiec61850:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mz Automation (08e79d7a-a50d-5d72-aa90-6a2dd0f650be) |
|---|---|
| Product | Libiec61850 (7e3361b8-3077-589b-9cfa-7baa22ff760b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19259 |
vulnerable | 2026-09-16 04:34:15.339837 |
MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow
MEDIUM (5.3)
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReference of the file src/iec61850/common/iec61850_common.c of the component MMS Protocol Workflow. Such manipulation of the argument GetNamedVariableListAttributesResponse.itemId leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-08T06:00:09.941Z
Updated: 2026-08-10T14:37:36.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19206 |
vulnerable | 2026-09-16 04:34:15.231600 |
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
MEDIUM (5.3)
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_values/sv_subscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to mitigate this issue. The patch is named a96bd674e0238276dd1387d31d52e55229d0771e. The affected component should be upgraded.
Published: 2026-08-07T13:45:12.065Z
Updated: 2026-08-07T14:24:02.477Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19108 |
vulnerable | 2026-09-16 04:34:15.226576 |
MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
MEDIUM (5.3)
A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected component is advised.
Published: 2026-08-06T20:30:14.200Z
Updated: 2026-08-08T02:36:24.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50103 |
vulnerable | 2026-07-29 00:57:47.555034 |
Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850
MEDIUM (6.5)
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value.
Published: 2026-07-23T20:50:42.198Z
Updated: 2026-07-24T13:41:40.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50039 |
vulnerable | 2026-07-29 00:57:47.494484 |
Stack-based Buffer Overflow in MZ Automation libIEC61850
HIGH (7.5)
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request.
Published: 2026-07-23T20:32:30.439Z
Updated: 2026-07-24T13:54:22.569Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50032 |
vulnerable | 2026-07-29 00:57:47.489420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49035 |
vulnerable | 2026-07-29 00:57:44.849757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3976 |
vulnerable | 2026-06-08 05:48:22.748301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2973 |
vulnerable | 2026-06-08 05:43:36.816857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2972 |
vulnerable | 2026-06-08 05:43:36.816315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2971 |
vulnerable | 2026-06-08 05:43:36.815835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2970 |
vulnerable | 2026-06-08 05:43:36.814442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1302 |
vulnerable | 2026-06-08 05:39:12.705408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.