CVE-2019-14463: Debian Linux

Critical severity, CVSS 9.1. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 29 only; version 30 only
• Libmodbus Libmodbus: before 3.0.7 (fixed in 3.0.7); from 3.1.0, before 3.1.5 (fixed in 3.1.5)

Published 2019-07-31. Last modified 2026-06-17.