A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/repor…
Medium CVSS 5.3
Summary
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not on the heap. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to resolve this issue. The patch …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/gff-cw/information/issues/2
- https://github.com/mz-automation/libiec61850/
- https://github.com/mz-automation/libiec61850/commit/5b2a69f44256b8548927d8afdd7ac5f5381abe1e
- https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2
- https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v
- https://vuldb.com/cve/CVE-2026-18582
- https://vuldb.com/submit/844920
- https://vuldb.com/vuln/385411
- https://vuldb.com/vuln/385411/cti
Timeline
- nvd_ingest NVD