Out-of-bounds Read in Bacnet-stack

CVE-2026-26264

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and…

Vulnerability class: Buffer Overflow

EPSS: 0.001 (20.9th percentile) — read the EPSS interpretation.

Affected products

  • Bacnet-stack — versions >= 1.5.0rc1, < 1.5.0rc4, < 1.4.3rc2

Weakness classification (CWE)

References