Buffer Overflow Vulnerability in BACnet Stack Open Source Protocol Library
CVE-2026-97692

7.7HIGH

Key Information:

Vendor

Bacnet-stack

Status
Bacnet-stack
Vendor
CVE Published:
13 November 2026

What is CVE-2026-97692?

The BACnet Stack is an open-source BACnet protocol library utilized in embedded systems. It contains a buffer overflow vulnerability in its BACnet/SC message decoder due to improper handling of option markers. When processing the header-option list, the decoder can unintentionally continue past the end of the message if the MORE bit is set in the last option. This oversight facilitates an out-of-bounds write to the static global array, potentially allowing exploitation from unauthenticated peers. The issue is present in versions prior to 1.4.6, 1.5.2, 1.6.1, and has been addressed in subsequent updates.

Affected Version(s)

bacnet-stack < 1.4.6 < 1.4.6

bacnet-stack >= 1.5.0, < 1.5.2 < 1.5.0, 1.5.2

bacnet-stack >= 1.6.0, < 1.6.1 < 1.6.0, 1.6.1

References

https://github.com/bacnet-stack/bacnet-stack/security/adv...
x_refsource_CONFIRM
https://github.com/bacnet-stack/bacnet-stack/pull/1435
x_refsource_MISC

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.