Remote Global Buffer Overflow in BACnet Stack's Official Router Application

CVE-2026-58498

What is CVE-2026-58498?

The BACnet Stack, an open-source protocol stack for embedded systems, contains a vulnerability in its official router-ipv6 application. Versions prior to 1.4.5, 1.5.1, and 1.6.0 are affected by a remote global buffer overflow, which can lead to out-of-bounds write access to the global transmit buffer. This issue can potentially allow malicious actors to exploit the vulnerability, making it imperative for users of affected versions to update to the patched releases for enhanced security.

References