Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending an RPM request with a truncated property list. The vulnerability stems from rpm_decode_object_property() calling the deprecated decode_tag_number_and_value() function at src/bacnet/rpm.c:344, which accepts no buffer length parameter and reads blindly from whatever pointer it receives. A crafted BACnet/IP packet with a 1-byte property payload containing an extended tag marker (0xF9) causes the decoder to read 1 byte past the end of the buffer, leading to crashes on embedded BACnet devices. The vulnerability exists in src/bacnet/rpm.c and affects any deployment that enables the ReadPropertyMultiple confirmed service handler (enabled by default in the reference server). This vulnerability is fixed in 1.4.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-24 | 1 | Disclosure1 |
| 2026-04-25 | 1 | General1 |
CVE-2026-41503 Out-of-Bounds Read in BACnet Stack ReadPropertyMultiple Service Prior to 1.4.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41503
Post summary
The entry reports an out‑of‑bounds read vulnerability (CVE‑2026‑41503) in BACnet Stack before version 1.4.3, with no evidence of exploitation, patches or PoC details.
CVE-2026-41503 BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadProperty… https://www.cve.org/CVERecord?id=CVE-2026-41503
Post summary
The text announces CVE-2026-41503 as an out-of-bounds read vulnerability in the BACnet Stack before version 1.4.3, without referencing PoC, exploit code, active exploitation, patch, or false positive claims.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bacnetstack | bacnet_stack | - | - | - |
| App | bacnetstack | bacnet_stack | 1.5.0 | - | - |