A flaw in the mz-automation libiec61850 component allows an attacker to trigger a free of memory that is not on the heap within the Reporting_RCBWriteAccessHandler function. The vulnerability can be remotely exploited; an attacker can manipulate input to the component, causing memory corruption that may lead either to crash or arbitrary execution of code. Based on the description, the potential for remote code execution is inferred rather than explicitly stated. The publicly released exploit indicates that real-world attacks are possible and that the flaw could be used for malicious activity. The impact on confidentiality, integrity, or availability is not explicitly enumerated in the description, but the nature of the flaw suggests that an attacker gaining malicious advantage could gain code execution privileges or cause a denial of service.

The affected product is mz-automation libiec61850, with all versions up to and including 1.6.1 affected. Version 1.6.2 and later include a fix and are considered safe.

The CVSS score of 6.9 places the vulnerability in the moderate severity range. EPSS is not available, but the flaw is listed as not present in the CISA KEV catalog. Because the exploit has been released to the public and can be launched remotely, the overall risk for environments that still run the vulnerable versions is high unless mitigated by an update or other controls.