Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-63033 1 Mz-automation 1 Lib60870 2026-07-31 6.5 Medium
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
CVE-2026-61893 1 Mz-automation 1 Lib60870 2026-07-31 6.5 Medium
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.