CVE-2025-66624

creationtimestamp| type| source ---|---|--- 2025-12-05 21:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7bfyebkyw2u...

CVE-2025-66624 BACnet-stack MS/TP reply matcher OOB read

BACnet Protocol Stack library provides a BACnet application layer, network layer and media access MAC layer communications services. Prior to 1.5.0.rc2, The npduisexpectedreply function in src/bacnet/npdu.c indexes requestpduoffset+2/3/5 and replypduoffset+1/2/4 without verifying that those APDU...