BA
Product
bacnet-stack
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 1
Watch
Add bacnet-stack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41475 | 9.1 | Apr 24 | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser Affected: >= 1.4.0, < 1.4.3 |
| CVE-2026-26264 | 8.1 | Feb 13 | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash Affected: >= 1.5.0rc1, < 1.5.0rc4; < 1.4.3rc2 |
| CVE-2026-41503 | 7.5 | Apr 24 | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser Affected: >= 1.4.0, < 1.4.3 |
| CVE-2026-41502 | 7.5 | Apr 24 | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder Affected: >= 1.4.0, < 1.4.3 |
| CVE-2026-21878 | 7.5 | Feb 13 | BACnet Stack Improperly Limits Pathnames to a Restricted Directory Affected: < 1.5.0.rc3 |
| CVE-2025-66624 | 7.5 | Dec 5 | BACnet-stack MS/TP reply matcher OOB read Affected: < 1.5.0.rc2 |
| CVE-2026-21870 | 5.5 | Feb 13 | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string Affected: <= 1.4.2; >= 1.5.0.rc1, <= 1.5.0.rc2 |
| CVE-2026-40279 | 3.7 | Apr 21 | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` Affected: < 1.4.3 |
Showing 8