In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service.
Weakness
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libiec61850 | Mz-automation | 1.4.0 (including) | 1.4.0 (including) |