Remote Out-of-Bounds Read in BACnet Stack Affects Embedded Systems

CVE-2026-62973

What is CVE-2026-62973?

A remote out-of-bounds read vulnerability exists in the BACnet Stack's client application. This flaw can be exploited when the client processes a legitimate ReadPropertyMultiple request from a malicious BACnet/IP peer. If the malicious peer sends a malformed ReadPropertyMultiple-ACK response, it could trigger a global buffer overflow read on the client's receive buffer, known as Rx_Buf. The vulnerability has been addressed in versions 1.4.5, 1.5.1, and 1.6.0.

References