Stack-Based Buffer Overflow in BACnet Stack for Embedded Systems

CVE-2026-45265

What is CVE-2026-45265?

The BACnet Stack, an open source protocol stack for embedded systems, contains a vulnerability that allows for a stack-based buffer overflow when handling malicious Atomic-Read-File requests in record access mode. The issue arises when a crafted request submits an excessively large RecordCount, leading to an out-of-bounds write in a stack-allocated BACNET_ATOMIC_READ_FILE_DATA structure. This flaw is triggered on the server-side and can result in a stack-buffer-overflow when invalid pointers are accessed during the memmove() operation. The vulnerability has been addressed in versions 1.4.4 and 1.5.1.

References