PatchTheCVE: libiec61850https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-45971: Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4https://patchthecve.com/cve/CVE-2024-45971.htmlhttps://patchthecve.com/cve/CVE-2024-45971.htmlWed, 17 Jun 2026 07:55:04 +0000CRITICAL 9.8: Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse message.CVE-2024-45970: Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd63https://patchthecve.com/cve/CVE-2024-45970.htmlhttps://patchthecve.com/cve/CVE-2024-45970.htmlWed, 17 Jun 2026 07:55:04 +0000CRITICAL 9.8: Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message.CVE-2024-36702: libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/bhttps://patchthecve.com/cve/CVE-2024-36702.htmlhttps://patchthecve.com/cve/CVE-2024-36702.htmlThu, 09 Jul 2026 01:19:03 +0000HIGH 7.4: libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.CVE-2024-28286: In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRhttps://patchthecve.com/cve/CVE-2024-28286.htmlhttps://patchthecve.com/cve/CVE-2024-28286.htmlWed, 17 Jun 2026 07:21:18 +0000HIGH 7.5: In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. The vulnerability manifests as SEGV and causes the application to crashCVE-2024-26529: An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of servichttps://patchthecve.com/cve/CVE-2024-26529.htmlhttps://patchthecve.com/cve/CVE-2024-26529.htmlWed, 17 Jun 2026 07:17:46 +0000HIGH 7.5: An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of src/mms/iso_mms/server/mms_named_variable_list_service.c.CVE-2024-25366: Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denihttps://patchthecve.com/cve/CVE-2024-25366.htmlhttps://patchthecve.com/cve/CVE-2024-25366.htmlWed, 17 Jun 2026 07:15:54 +0000MEDIUM 6.2: Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelist_service component.