CVE-2026-19108

Received Received - Intake

Use After Free in libiec61850 Server Component

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected component is advised.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-19108

Affected Vendors & Products

Vendor	Product	Version / Range
mz_automation	libiec61850	to 1.6.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in MZ Automation libiec61850 versions up to 1.6.1. It occurs in the function deleteDataSetValuesShadowBuffer within the file src/iec61850/server/mms_mapping/reporting.c, specifically affecting the URCB Revalidation component. A use-after-free flaw happens when a program continues to use memory after it has been freed, potentially leading to crashes or arbitrary code execution.

Detection Guidance

This vulnerability requires local access to exploit and is specific to MZ Automation libiec61850 versions up to 1.6.1. Detection involves checking the installed version of libiec61850. Use commands like 'dpkg -l | grep libiec61850' on Debian-based systems or 'rpm -qa | grep libiec61850' on RPM-based systems to verify the version.

Impact Analysis

An attacker could exploit this vulnerability by accessing the system locally to trigger the use-after-free condition. This may cause the application to crash or allow the attacker to execute arbitrary code with the privileges of the affected process. Successful exploitation could lead to data corruption, denial of service, or unauthorized system access depending on the context of the vulnerable application.

Mitigation Strategies

Upgrade MZ Automation libiec61850 to version 1.6.2 or later. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Follow standard update procedures for your system to apply the fix.

Hi! I’m here to help you understand CVE-2026-19108. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70