> CVE-2026-67873

« BACK_TO_HOME
PUBLISHED
2026-08-06 00:16
MODIFIED
2026-08-06 00:16
EPSS (Prob. Exploit)
0.73%
Top 45.9%
DATA SOURCES:
NVD 🔗 2026-08-06 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02

> DESCRIPTION

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
14 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
06/08/2026 00:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/mz-automation/lib60870
https://github.com/mz-automation/lib60870/blob/master/user_guide.adoc
https://github.com/mz-automation/lib60870/issues/201
https://github.com/mz-automation/lib60870/releases/tag/v2.4.0
« BACK_TO_HOME