Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-63550 EUVD-2026-51357GHSA-mgh9-x48v-5vx9

MZ Automation libiec61850 Out-of-bounds Read

Published Jul 30, 2026 · Updated Jul 31, 2026 · Assigned by icscert

Description

The MMS BER decoder contains a boundary-handling flaw in the processing
of certain fields within confirmed-request messages. When a crafted
BER-encoded element is received over an established MMS session (TCP
port 102), the decoder may advance its internal read position
incorrectly, leading to a heap out-of-bounds read. This condition causes
the MMS handling process to terminate unexpectedly, resulting in a
denial-of-service.

Affected products

VendorProductAffectedFixed
MZ Automation libiec61850 < 1.6.2 1.6.2

Advisories 1

References