| BDSA-2026-2039 |
|
Medium |
Feb 16, 2026 |
The BACnet Protocol Stack library is vulnerable to a stack-based buffer overflow due to improper handling of null termination in the `tokenizer_string`
more...
The BACnet Protocol Stack library is vulnerable to a stack-based buffer overflow due to improper handling of null termination in the `tokenizer_string` function. This could allow an attacker to cause a denial-of-service (DoS) by crashing the application when processing string literals that exceed the buffer limit.
less...
|
|
| BDSA-2026-2033 |
|
Medium |
Feb 16, 2026 |
BACnet Stack is vulnerable to out-of-bounds read due to a length underflow in the `wp_decode_service_request` function. This could allow an attacker to
more...
BACnet Stack is vulnerable to out-of-bounds read due to a length underflow in the `wp_decode_service_request` function. This could allow an attacker to cause a denial-of-service (DoS) by crashing the process handling malformed WriteProperty requests.
less...
|
|
| BDSA-2025-48094 |
|
Medium |
Dec 08, 2025 |
The BACnet Protocol Stack library is vulnerable to an out-of-bounds read due to insufficient validation of APDU lengths in the `npdu_is_expected_reply`
more...
The BACnet Protocol Stack library is vulnerable to an out-of-bounds read due to insufficient validation of APDU lengths in the `npdu_is_expected_reply` function. This could allow an attacker to reliably cause a denial-of-service (DoS) by triggering a crash on strict builds or inducing undefined behavior on unprotected builds.
less...
|
|
| BDSA-2025-123945 |
|
Medium |
Feb 16, 2026 |
BACnet Stack is vulnerable to path traversal due to improper validation of user-provided file paths in `apps/readfile/main.c` and `ports/posix/bacfile-
more...
BACnet Stack is vulnerable to path traversal due to improper validation of user-provided file paths in `apps/readfile/main.c` and `ports/posix/bacfile-posix.c`. This could allow an attacker to write files to arbitrary directories, potentially leading to configuration file overwrites or arbitrary file creation.
less...
|
|