CVE-2026-67873 in lib60870información

Resumen

por MITRE • 2026-08-06

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

MITRE

Reservar

2026-07-30

Divulgación

2026-08-06

Moderación

aceptado

Artículo

VDB-386444

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Chemical, Agriculture, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-67873
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-67873
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-67873/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!