CVE-2026-51219

Deferred Deferred - Pending Action

Heap Buffer Overflow in lib60870

Publication date: 2026-06-29

Last updated on: 2026-06-30

Assigner: MITRE

Description

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-29

Last Modified

2026-06-30

Generated

2026-07-20

AI Q&A

2026-06-30

EPSS Evaluated

2026-07-19

NVD

CVE-2026-51219

EUVD

EUVD-2026-40245

Affected Vendors & Products

Vendor	Product	Version / Range
lib60870	lib60870	From 2.3.3 (inc) to 2.3.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of the lib60870 library versions 2.3.3 to 2.3.6. It occurs when the function processes a specially crafted payload, which can cause memory corruption.

A heap buffer overflow means that the program writes more data to a buffer located in the heap memory than it is allocated to hold, potentially overwriting adjacent memory.

Detection Guidance

The vulnerability is a heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 versions 2.3.3 to 2.3.6, triggered by a crafted payload. Detection would involve monitoring for abnormal behavior or crashes in the lib60870 CS104 server component when processing ASDU messages.

Since the issue arises from malformed or crafted ASDU payloads causing out-of-bounds reads, network detection could focus on inspecting IEC 60870-5-104 protocol traffic for unusual or malformed high-priority ASDU messages.

However, no specific detection commands or signatures are provided in the available information.

Impact Analysis

Exploitation of this vulnerability can lead to a Denial of Service (DoS) condition. Attackers can cause the affected application to crash or become unresponsive by sending a crafted payload that triggers the heap buffer overflow.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The vulnerability affects lib60870 versions 2.3.3 to 2.3.6. Immediate mitigation steps include upgrading to a version of lib60870 where this heap buffer overflow is fixed.

If an upgrade is not immediately possible, consider restricting or filtering network traffic to the affected service to block potentially crafted ASDU payloads that could trigger the overflow.

Additionally, monitoring the application for crashes or abnormal behavior and applying any available patches or vendor advisories is recommended.

Hi! I’m here to help you understand CVE-2026-51219. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70