PT-2026-66623 · Mz Automation Gmbh · Libiec61850

Arun Babu · CVE-2026-56758 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-56758

Affected Products

Libiec61850

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-56758 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-211-10 · Note