A heap-based buffer overflow exists in the libIEC61850 library when it processes a crafted MMS Initiate request. The overflow can lead to remote code execution when Address Space Layout Randomization (ASLR) is disabled, and can also cause memory corruption or denial of service when ASLR is enabled. This flaw is classified as CWE‑122, reflecting an improper input handling that allows an attacker to overwrite contiguous memory locations.

The vulnerable component is MZ Automation’s libIEC61850 library. The exact product version is not listed; vendor recommends moving to the latest available build to remediate the issue.

The vulnerability carries a CVSS score of 9.2, indicating high severity. The EPSS score is less than 1 %, suggesting a low probability of exploitation at present. It is not listed in CISA’s KEV catalog. The most likely attack vector is remote, via an attacker‑crafted MMS message that the library processes from an untrusted network source. Successful exploitation requires ASLR to be disabled for remote code execution, while ASLR enabled scenarios would result in memory corruption or service disruption.