Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-50103

Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MZ Automation libIEC61850

Default version status: unaffected

  • 1.0.0 to ≤ 1.6.1affected

References