bacnet-stack vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20267

Newest CVEs

• CVE-2026-41503

  BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser

  bacnet-stack · bacnet-stack

  High8.7
• CVE-2026-41502

  BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder

  bacnet-stack · bacnet-stack

  High8.7
• CVE-2026-41475

  BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser

  bacnet-stack · bacnet-stack

  High8.7
• CVE-2026-40279

  BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`

  bacnet-stack · bacnet-stack

  Low3.7
• CVE-2026-26264

  BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash

  bacnet-stack · bacnet-stack

  High7.8
• CVE-2026-21878

  BACnet Stack Improperly Limits Pathnames to a Restricted Directory

  bacnet-stack · bacnet-stack

  High7.5
• CVE-2026-21870

  The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string

  bacnet-stack · bacnet-stack

  Medium5.5
• CVE-2025-66624

  BACnet-stack MS/TP reply matcher OOB read

  bacnet-stack · bacnet-stack

  High7.5