CVE-2026-19206

Name of the Vulnerable Software and Affected Versions libiec61850 versions prior to 1.6.2

Description A heap-based buffer overflow exists in the ASDU Element Handler component within the SVReceiver stopThreadless() function located in the src/sampled values/sv subscriber.c file. This issue allows a local attacker to trigger the overflow through specific manipulation.

Recommendations Update to version 1.6.2. As a temporary mitigation, restrict local access to the system to prevent exploitation of the SVReceiver stopThreadless() function.