In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19944.json"