BS
Product
Bacnet Stack
9
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 1
Watch
Add Bacnet Stack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41475 | 9.1 | Apr 24 | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser Affected: 1.4.0 before 1.4.3; 1.5.0; 1.5.0; 1.5.0 |
| CVE-2023-51773 | 9.1 | Feb 29 | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c Affected: before 1.3.2 |
| CVE-2026-26264 | 8.1 | Feb 13 | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash Affected: 1.4.0 before 1.4.3; 1.4.3; 1.5.0; 1.5.0; 1.5.0 |
| CVE-2026-41503 | 7.5 | Apr 24 | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser Affected: 1.4.0 before 1.4.3; 1.5.0 |
| CVE-2026-41502 | 7.5 | Apr 24 | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder Affected: 1.4.0 before 1.4.3; 1.5.0; 1.5.0; 1.5.0 |
| CVE-2026-21878 | 7.5 | Feb 13 | BACnet Stack Improperly Limits Pathnames to a Restricted Directory Affected: 1.5.0; 1.5.0 |
| CVE-2025-66624 | 7.5 | Dec 5 | BACnet-stack MS/TP reply matcher OOB read Affected: 1.5.0 |
| CVE-2026-21870 | 5.5 | Feb 13 | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string Affected: through 1.4.2; 1.5.0; 1.5.0 |
| CVE-2026-40279 | 3.7 | Apr 21 | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` Affected: before 1.4.3 |
Showing 9