CVE-2026-19206
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_values/sv_subscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to mitigate this issue. The patch is named a96bd674e0238276dd1387d31d52e55229d0771e. The affected component should be upgraded.
| CWE | CWE-122 CWE-119 |
| Vendor | mz automation |
| Product | libiec61850 |
| Published | Aug 7, 2026 |
| Last Updated | Aug 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for mz automation libiec61850
Be the first to know when new medium vulnerabilities affecting mz automation libiec61850 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
MZ Automation / libiec61850
1.6.0 1.6.1
References
vuldb.com: https://vuldb.com/vuln/386950 vuldb.com: https://vuldb.com/vuln/386950/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19206 vuldb.com: https://vuldb.com/submit/864840 github.com: https://github.com/mz-automation/libiec61850/issues/598 github.com: https://github.com/mz-automation/libiec61850/issues/598#issuecomment-4858659113 github.com: https://github.com/mz-automation/libiec61850/commit/a96bd674e0238276dd1387d31d52e55229d0771e github.com: https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2
Credits
Chuan Wei 🔍 SCU_1CP (VulDB User) SCU_1CP (VulDB User)