CVE-2026-68906 Details
Description
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoder_decodeLength for a truncated long-form length. The continue path therefore swallows the error, reads buffer[-1], resets parsing to the beginning, and repeats the same malformed state. An unauthenticated remote peer can send a malformed AARE PDU during association to cause an infinite CPU loop under a normal allocator or a one-byte out-of-bounds read and process abort when the preceding byte is inaccessible. This issue is fixed in version 1.6.2.
A vulnerability in libIEC61850 versions prior to 1.6.2 allows an unauthenticated remote peer to cause a denial-of-service condition or an out-of-bounds read by sending a malformed AARE PDU during association. The issue arises in the 'parseUserInformation' function, where improper length validation leads to an infinite loop or a one-byte out-of-bounds heap read, depending on the memory allocator used.
Users are advised to update to libIEC61850 version 1.6.2, which addresses the vulnerability by correcting the length validation order in the affected parsing function.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 16, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mz-automation/libiec61850/security/advisories/GHSA-f7xm-q62q-22cx | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/mz-automation/libiec61850/commit/2edf2a12bf0ced6a2ac595862e3e873814983f7f | [email protected] | Source CodeVendor |
| https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2 | [email protected] | Release NotesVendor |
| https://github.com/mz-automation/libiec61850/security/advisories/GHSA-f7xm-q62q-22cx | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mz-automation libIEC61850 | <= 1.6.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 16, 2026 | New CVE Received | [email protected] |