Out-of-Bounds Read Vulnerability in BACnet Stack by BACnet

CVE-2026-41503

What is CVE-2026-41503?

BACnet Stack, an open source protocol stack for embedded systems, is susceptible to an out-of-bounds read vulnerability in its ReadPropertyMultiple service. This vulnerability allows unauthenticated remote attackers to exceed allocated buffer boundaries by sending a crafted RPM request containing a truncated property list. Specifically, the vulnerability arises from the rpm_decode_object_property() function, which calls a deprecated decoding method that fails to limit buffer length. As a consequence, this may lead to crashes on devices utilizing BACnet/IP when receiving a specially designed packet. The issue has been addressed in version 1.4.3.

References