BA
Vendor
Bacnetstack
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41503 | BS Bacnet Stack Bacnetstack | 7.5 | Apr 24 | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser |
| CVE-2026-41502 | BS Bacnet Stack Bacnetstack | 7.5 | Apr 24 | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder |
| CVE-2026-41475 | BS Bacnet Stack Bacnetstack | 9.1 | Apr 24 | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser |
| CVE-2026-40279 | BS Bacnet Stack Bacnetstack | 3.7 | Apr 21 | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` |
| CVE-2026-26264 | BS Bacnet Stack Bacnetstack | 8.1 | Feb 13 | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash |
| CVE-2026-21878 | BS Bacnet Stack Bacnetstack | 7.5 | Feb 13 | BACnet Stack Improperly Limits Pathnames to a Restricted Directory |
| CVE-2026-21870 | BS Bacnet Stack Bacnetstack | 5.5 | Feb 13 | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string |
| CVE-2025-66624 | BS Bacnet Stack Bacnetstack | 7.5 | Dec 5 | BACnet-stack MS/TP reply matcher OOB read |
| CVE-2023-51773 | BS Bacnet Stack Bacnetstack | 9.1 | Dec 25 | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c |