CVE-2019-6719: Mz-Automation LIBIEC61850

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/iso_server/iso_server.c, as demonstrated by examples/server_example_goose/server_example_goose.c and examples/server_example_61400_25/server_example_61400_25.c.

Affected products

• Mz-Automation LIBIEC61850: version 1.3.1 only

Published 2019-01-23. Last modified 2026-06-17.