Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and earlier, an off-by-one stack-based buffer overflow in the ubasic interpreter causes a crash (SIGABRT) when processing string literals longer than the buffer limit. The tokenizer_string function in src/bacnet/basic/program/ubasic/tokenizer.c incorrectly handles null termination for maximum-length strings. It writes a null byte to dest[40] when the buffer size is only 40 (indices 0-39), triggering a stack overflow.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-21870 BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and earlie… https://www.cve.org/CVERecord?id=CVE-2026-21870
Post summary
The text supplies only a brief description and a link to the CVE record, lacking concrete technical details or exploit information.
CVE-2026-21870 BACnet Protocol Stack Library Off-by-One Buffer Overflow in Tokenizer String Handling https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21870
Post summary
The text announces CVE-2026-21870, noting an off‑by‑one buffer overflow in a BACnet protocol stack library's tokenizer, but provides no PoC, exploit code, patch, or evidence of active exploitation.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bacnetstack | bacnet_stack | - | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |