bacnet-stack

Products

ProductCVEsExploitedLatest
bacnet-stack8–Apr 24, 2026

Exploited and recent CVEs

  • CVE-2026-41503 High 8.7 BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser 0.4%
  • CVE-2026-41502 High 8.7 BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder 0.4%
  • CVE-2026-41475 High 8.7 BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser 0.5%
  • CVE-2026-40279 Low 3.7 BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` 0.2%
  • CVE-2026-26264 High 7.8 BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash 0.4%
  • CVE-2026-21878 High 7.5 BACnet Stack Improperly Limits Pathnames to a Restricted Directory 0.4%
  • CVE-2026-21870 Medium 5.5 The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string 0.3%
  • CVE-2025-66624 High 7.5 BACnet-stack MS/TP reply matcher OOB read 0.4%