Advisories · Technology
bacnet-stack.
Every CVE that names bacnet-stack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser
- bacnet-stack
- Memory corruption
- CVSS 8.7 High
BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder
- bacnet-stack
- Memory corruption
- CWE-193
- CVSS 8.7 High
BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser
- bacnet-stack
- Memory corruption
- CVSS 3.7 Low
BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- bacnet-stack
- CWE-758
- CVSS 7.8 High
BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash
- bacnet-stack
- Memory corruption
- CVSS 7.5 High
BACnet Stack Improperly Limits Pathnames to a Restricted Directory
- bacnet-stack
- Path traversal
- CVSS 5.5 Medium
The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string
- bacnet-stack
- CWE-193
- CVSS 7.5 High
BACnet-stack MS/TP reply matcher OOB read
- bacnet-stack
- Memory corruption