MZ Automation GmbH libiec61850

Multiple heap out-of-bounds read vulnerabilities in MZ Automation GmbH's libiec61850 (versions prior to 1.6.2) expose critical energy infrastructure systems to denial-of-service attacks. The root cause lies in insufficient input validation within the library, allowing attackers to trigger memory corruption conditions without requiring authentication. Because this is a widely adopted open-source library embedded in operational technology (OT) environments, the attack surface is broad and the potential for cascading failures in power grids and industrial control systems is significant. Organizations that rely on third-party libraries without tracking version currency or applying timely patches are especially at risk. Delayed remediation in critical infrastructure contexts can have physical safety and national security consequences beyond typical IT environments.