CVE-2026-19206: MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to mitigate this issue. The patch is named a96bd674e0238276dd1387d31d52e55229d0771e. The affected component should be upgraded.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MZ Automation libiec61850 (ASDU Element Handler: SVReceiver_stopThreadless in src/sampled_values/sv_subscriber.c)to a version that resolves this vulnerability.Fixed in 1.6.2Patch a96bd674e0238276dd1387d31d52e55229d0771e - Compensating control
Since the attack must be initiated from a local position, restrict local access to the affected system/process to trusted users/hosts only (e.g., via OS access controls) to reduce the chance that an attacker can trigger the local exploit.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19206?
The severity of CVE-2026-19206 is classified as medium with a score of 5.3.
How do I fix CVE-2026-19206?
To fix CVE-2026-19206, update MZ Automation libiec61850 to version 1.6.2 or later.
What impact does CVE-2026-19206 have on my system?
CVE-2026-19206 can lead to a heap-based buffer overflow which may allow an attacker to execute arbitrary code.
Which versions are affected by CVE-2026-19206?
CVE-2026-19206 affects MZ Automation libiec61850 versions up to and including 1.6.1.
What component is impacted by CVE-2026-19206?
CVE-2026-19206 impacts the ASDU Element Handler specifically through the function SVReceiver_stopThreadless.