CVE-2026-51219
Received Received - Intake

Heap Buffer Overflow in lib60870

Vulnerability report for CVE-2026-51219, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-06-29

Last updated on: 2026-06-29

Assigner: MITRE

Description

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-29
Last Modified
2026-06-29
Generated
2026-06-30
AI Q&A
2026-06-30
EPSS Evaluated
N/A
NVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of the lib60870 library versions 2.3.3 to 2.3.6. It occurs when the function processes a specially crafted payload, which can cause memory corruption.

A heap buffer overflow means that the program writes more data to a buffer located in the heap memory than it is allocated to hold, potentially overwriting adjacent memory.

Impact Analysis

Exploitation of this vulnerability can lead to a Denial of Service (DoS) condition. Attackers can cause the affected application to crash or become unresponsive by sending a crafted payload that triggers the heap buffer overflow.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51219. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart