Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple service decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending a truncated WPM request. The vulnerability stems from wpm_decode_object_property() calling the deprecated decode_tag_number_and_value() function, which performs no bounds checking on the input buffer. A crafted BACnet/IP packet with a truncated property payload causes the decoder to read 1-7 bytes past the end of the buffer, leading to crashes or information disclosure on embedded BACnet devices. This vulnerability is fixed in 1.4.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-24 | 1 | Disclosure1 |
| 2026-04-25 | 1 | General1 |
CVE-2026-41475 Out-of-Bounds Read in BACnet Stack WritePropertyMultiple Service Decoder https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41475
Post summary
The entry identifies CVE‑2026‑41475 as an Out‑of‑Bounds Read in the BACnet stack and links to an external site for more info, without any additional context or actionable details.
CVE-2026-41475 BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropert… https://www.cve.org/CVERecord?id=CVE-2026-41475
Post summary
The post briefly announces an out-of-bounds read vulnerability (CVE‑2026‑41475) in BACnet Stack prior to version 1.4.3, providing minimal technical detail but no PoC, exploit code, or patch information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bacnetstack | bacnet_stack | - | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |