Stack Buffer Overflow Vulnerability in BACnet Stack for Embedded Systems

CVE-2026-47710

What is CVE-2026-47710?

The BACnet Stack, an open source protocol stack C library designed for embedded systems, is susceptible to a stack buffer overflow. This vulnerability occurs when a Loop object retrieves a referenced property through its default timer path. Specifically, when a referenced property is OBJECT_STRUCTURED_VIEW or PROP_DESCRIPTION, an overly long string controlled by an attacker can trigger this overflow. It is crucial for users to update to versions 1.4.4, 1.5.1, or 1.6.0 to mitigate potential exploitation of this issue.

References