Bacnetstack vulnerabilities

Products

• Bacnet Stack 9

Newest

• bacnet-stack, bacnetstack bacnet stack +1 more BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser CVE-2026-41503 8.7 HighApril 24, 2026
• bacnet-stack, bacnetstack bacnet stack +1 more BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder CVE-2026-41502 8.7 HighApril 24, 2026
• bacnet-stack, bacnetstack bacnet stack +1 more BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser CVE-2026-41475 8.7 HighApril 24, 2026
• bacnetstack bacnet stack, bacnet-stack +1 more BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` CVE-2026-40279 3.7 LowApril 21, 2026
• bacnetstack bacnet stack, bacnet-stack +1 more BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash CVE-2026-26264 7.8 HighFebruary 13, 2026
• bacnetstack bacnet stack, bacnet-stack +1 more BACnet Stack Improperly Limits Pathnames to a Restricted Directory CVE-2026-21878 7.5 HighFebruary 13, 2026
• bacnet-stack, bacnetstack bacnet stack +1 more The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string CVE-2026-21870 5.5 MediumFebruary 13, 2026
• bacnet-stack, bacnetstack bacnet stack +1 more BACnet-stack MS/TP reply matcher OOB read CVE-2025-66624 7.5 HighDecember 5, 2025
• bacnetstack bacnet stack, bacnet protocol stack project protocol stack +1 more BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in... CVE-2023-51773 9.1 CriticalDecember 25, 2023