CVE-2026-66369

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The GOOSE parser contains an off-by-one boundary-handling flaw triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser incorrectly advances its internal buffer position, leading to a heap out-of-bounds read. This condition results in the termination of the subscriber process, causing a denial-of-service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.