CVE-2026-56758CWE-125

CVE-2026-56758

Medium · published July 31, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS

connection establishment. When parsing certain fields within the

calling AP title, an attacker controlled length value of zero or one may

cause the parser to read past the end of a heap buffer.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-31T03:16Z
References (2)
EPSS history
Timeline
  • 30 JUL 22:29Z
    MZ Automation libiec61850 Out-of-bounds Read
    cvelistv5