Unscored CVE-2020-7054 EUVD-2020-28188GHSA-g2w3-8w5r-xm44

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type.

References

https://github.com/mz-automation/libiec61850/issues/200