Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2026-57446medium5.3

libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle

Impact

libIEC61850 versions 1.6.1 to 1.6.2 have a double free vulnerability in the MMS ObtainFile task, allowing remote crashes. The issue occurs when a task is reused and destination creation fails. Servers with MMS file service and ObtainFile enabled are affected.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

mz-automation · GitHub_M

libiec61850

1 range
GitHub_M version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

>= 1.6.1, < 1.6.2

unaffected

unknown

Other versions: unknown

Original source description

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle but leaves the stale non-NULL value in a task marked MMS_FILE_UPLOAD_STATE_NOT_USED. If a later ObtainFile request reuses that task and destination creation fails, MMS_FILE_UPLOAD_STATE_SEND_OBTAIN_FILE_ERROR_DESTINATION cleanup closes the stale FILE object again. Servers with the MMS file service and ObtainFile enabled can therefore be crashed remotely by the success-then-failure request sequence. This issue is fixed in version 1.6.2.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance · not supplied
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-57446

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-415 ↗

CWE-415: Double Free

GitHub_M

Related →
CWE-664 ↗

CWE-664: Improper Control of a Resource Through its Lifetime

GitHub_M

Related →
CWE-672 ↗

CWE-672: Operation on a Resource after Expiration or Release

GitHub_M

Related →
Contributing organizations · 2
GitHub_M

Assigning organization

2026-10-16
CISA-ADP

Additional data publisher

2026-10-28

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

3 sources
github.com/mz-automation/libiec61850/security/advisories/GHSA-cxgr-7v9h-fj9p
exploitGitHub_M · CISA-ADP
github.com/mz-automation/libiec61850/commit/d86b4a9c7a903641819235e1678b18901518f3cd
PatchGitHub_M
github.com/mz-automation/libiec61850/releases/tag/v1.6.2
Release notesGitHub_M