Out-of-Bounds Read Vulnerability in BACnet Stack by BACnet
CVE-2026-46674

7.5HIGH

Key Information:

Vendor

Bacnet-stack

Status
Bacnet-stack
Vendor
CVE Published:
12 November 2026

What is CVE-2026-46674?

BACnet Stack, an open-source protocol stack for embedded systems, contains an out-of-bounds read vulnerability prior to versions 1.4.4 and 1.5.1. This vulnerability arises from a mismatch between an externally controlled returnedRecordCount field and the fixed-size internal fileData[] array in BACNET_ATOMIC_WRITE_FILE_DATA, potentially allowing unintended access to memory locations. This issue has been addressed and patched in the subsequent versions 1.4.4 and 1.5.1. For detailed information on the vulnerability, refer to the security advisory.

Affected Version(s)

bacnet-stack < 1.4.4 < 1.4.4

bacnet-stack < 1.5.1 < 1.5.1

References

https://github.com/bacnet-stack/bacnet-stack/security/adv...
x_refsource_CONFIRM
https://github.com/bacnet-stack/bacnet-stack/pull/1344
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.