In libIEC61850 1.4.0, MmsValuenewOctetString in mms/isomms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation.