CVE-2026-63033 | MZ Automation lib60870 up to 2.4.0 IEC 60870-5-104 Protocol InformationObject_ParseObjectAddress heap-based overflow

A vulnerability, which was classified as critical, was found in MZ Automation lib60870 up to 2.4.0. The impacted element is the function InformationObject_ParseObjectAddress of the component IEC 60870-5-104 Protocol Handler. Such manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-63033. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.