CVE-2024-36702

HIGH

libiec61850 v1.5 - Heap-based Buffer Overflow via BerEncoder_encodeLength

Title source: llm

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.

Core 3

Core References

Product, Release Notes

Product

Exploit, Issue Tracking

CVSS v3 7.4

EPSS 0.0034

EPSS Percentile 25.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-122 CWE-787

Status published

Products (1)

mz-automation/libiec61850 1.5

Published Jun 11, 2024

Tracked Since Feb 18, 2026