Out-of-bounds Read Affecting libiec61850 package, versions [0,]


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.18% (8th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Out-of-bounds Read vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-CONAN-LIBIEC61850-18488387
  • published31 Jul 2026
  • disclosed31 Jul 2026
  • creditUnknown

Introduced: 31 Jul 2026

NewCVE-2026-56758  (opens in a new tab)
CWE-125  (opens in a new tab)

How to fix?

A fix was pushed into the master branch but not yet published.

Overview

Affected versions of this package are vulnerable to Out-of-bounds Read in the processing of AARQ PDUs during MMS connection establishment, specifically when parsing certain fields within the calling AP title. An attacker can cause the parser to read past the end of a heap buffer by supplying a crafted length value of zero or one.

CVSS Base Scores

version 4.0
version 3.1