CVE-2026-63033
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Jul 30, 2026
Description
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.