Bacnet-Stack CVEs
41 CVEs and advisories name Bacnet-Stack as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45341BACnet Stack: NULL pointer dereference in bacnet_device_object_reference_decode() when WriteProperty updates Structured View…
- CVE-2026-45265Atomic-Read-File RecordCount Stack-Based Out-of-Bounds Write in bacnet-stack
- CVE-2026-52786BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()
- CVE-2026-41503BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser
- CVE-2026-41502BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder
- CVE-2026-41475BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser
- CVE-2026-40279BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- CVE-2026-26264BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash
- CVE-2026-21878BACnet Stack Improperly Limits Pathnames to a Restricted Directory
- CVE-2026-21870The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string
- CVE-2025-66624BACnet-stack MS/TP reply matcher OOB read