BACnet Stack Bacnet Stack

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs

BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.

Published 2023-12-25 · Analyzed

9.1EPSS 0.011

BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser

Published 2026-04-24 · Analyzed

9.1EPSS 0.005

BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser

Published 2026-04-24 · Analyzed

8.7EPSS 0.004

BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder

Published 2026-04-24 · Analyzed

8.7EPSS 0.004

BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash

Published 2026-02-13 · Analyzed

8.1EPSS 0.004

BACnet-stack MS/TP reply matcher OOB read

Published 2025-12-05 · Analyzed

7.5EPSS 0.004

BACnet Stack Improperly Limits Pathnames to a Restricted Directory

Published 2026-02-13 · Analyzed

7.5EPSS 0.004

The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string

Published 2026-02-13 · Analyzed

5.5EPSS 0.003

BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`

Published 2026-04-21 · Analyzed

3.7EPSS 0.002