CVE-2026-67873 in lib60870

Sumário

de MITRE • 06/08/2026

A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: MITRE
• Reservar: 30/07/2026
• Divulgação: 06/08/2026
• Moderação: aceite
• Entrada: VDB-386444
• CPE: pronto
• CWE: CWE-120 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Chemical, Energy, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-67873
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-67873
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-67873/