CVE-2019-19944: Mz-Automation LIBIEC61850

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos.

Affected products

• Mz-Automation LIBIEC61850: version 1.4.0 only

Published 2019-12-23. Last modified 2026-06-17.