https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:43:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343348 EUVD-2026-343348 https://cve.radiocsirt.org/vuln/euvd-2026-343348 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61893 <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61893 https://cve.radiocsirt.org/vuln/ghsa-gfjj-vr9m-mw6f <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> https://cve.radiocsirt.org/vuln/ghsa-gfjj-vr9m-mw6f https://cve.radiocsirt.org/vuln/icsa-26-211-11 <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer. A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.</p> <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer. A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.</p> https://cve.radiocsirt.org/vuln/icsa-26-211-11 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61893 <p><strong>Affected:</strong> Ubuntu:26.04:LTS: lib60870</p> <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> <p><strong>Affected:</strong> Ubuntu:26.04:LTS: lib60870</p> <p>A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61893