MZ Automation libIEC61850

• CVE-2026-68906 High 8.7 libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU 0.5%
• CVE-2026-68907 High 8.2 libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments 0.4%
• CVE-2026-68908 Medium 5.3 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path 0.5%
• CVE-2026-57446 Medium 5.3 libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle 0.4%
• CVE-2026-48741 High 7.5 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS 0.5%
• CVE-2026-48503 High 7.5 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead 0.5%
• CVE-2026-19259 Medium 5.3 MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow 0.2%
• CVE-2026-19206 Medium 5.3 MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow 0.2%
• CVE-2026-19108 Medium 5.3 MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free 0.2%
• CVE-2026-18583 Medium 5.3 mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds 0.9%
• CVE-2026-18582 Medium 5.3 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap 0.9%
• CVE-2026-50032 High 7.5 NULL Pointer Dereference in MZ Automation libIEC61850 0.5%
• CVE-2026-50103 Medium 6.5 Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850 0.3%
• CVE-2026-49035 High 8.1 Stack-based Buffer Overflow in MZ Automation libIEC61850 0.6%
• CVE-2026-50039 High 7.5 Stack-based Buffer Overflow in MZ Automation libIEC61850 0.5%
• CVE-2022-3976 Medium 5.5 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal 0.5%
• CVE-2022-2970 Critical 10.0 MZ Automation libIEC61850 Stack-Based Buffer Overflow 1.5%
• CVE-2022-2972 Critical 10.0 MZ Automation libIEC61850 Stack-Based Buffer Overflow 1.6%
• CVE-2022-2971 High 8.6 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion') 1.1%
• CVE-2022-2973 High 8.6 MZ Automation libIEC61850 NULL Pointer Dereference 1.1%
• CVE-2022-1302 High 7.5 Malformed Goose Message in LibIEC61850 may result in a denial of service 1.1%
• CVE-2020-15158 High 7.7 Heap buffer overflow in libIEC61850 2.0%