Heap Buffer Overflow in lib60870 Affects HighPriorityASDUQueue Functionality
CVE-2026-51219

6.5MEDIUM

Key Information:

Vendor

mz-automation

Status
lib60870
Vendor
CVE Published:
29 June 2026

What is CVE-2026-51219?

A heap buffer overflow vulnerability exists in the HighPriorityASDUQueue_hasUnconfirmedIMessages function within lib60870 versions 2.3.3 to 2.3.6. This flaw can be exploited by attackers to generate a Denial of Service (DoS) condition through the use of specially crafted payloads, impacting the functionality and stability of affected systems. Users of the lib60870 library are advised to apply relevant security measures to mitigate potential risks.

References

https://github.com/mz-automation/lib60870
https://github.com/mz-automation/lib60870/releases
https://github.com/mz-automation/lib60870/issues/196

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.