← Database

CVE-2026-61893

MEDIUM CVSS: 6.5 Published: 2026-07-30 Modified: 2026-07-31

Description

A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.

Affected Platforms

Unknown

Weakness Type

CWE-125

References