BA
Vendor
bacnet-stack
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41503 | BA bacnet-stack bacnet-stack | 7.5 | Apr 24 | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser |
| CVE-2026-41502 | BA bacnet-stack bacnet-stack | 7.5 | Apr 24 | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder |
| CVE-2026-41475 | BA bacnet-stack bacnet-stack | 9.1 | Apr 24 | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser |
| CVE-2026-40279 | BA bacnet-stack bacnet-stack | 3.7 | Apr 21 | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` |
| CVE-2026-26264 | BA bacnet-stack bacnet-stack | 8.1 | Feb 13 | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash |
| CVE-2026-21878 | BA bacnet-stack bacnet-stack | 7.5 | Feb 13 | BACnet Stack Improperly Limits Pathnames to a Restricted Directory |
| CVE-2026-21870 | BA bacnet-stack bacnet-stack | 5.5 | Feb 13 | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string |
| CVE-2025-66624 | BA bacnet-stack bacnet-stack | 7.5 | Dec 5 | BACnet-stack MS/TP reply matcher OOB read |