CVE-2026-52788 BACnet Stack: Buffer overflows in bsc_node_parse_urls() (BACnet/SC Address Resolution ACK URL parser)

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, the bscnodeparseurls function in src/bacnet/datalink/bsc/bsc-node.c contains three distinct bugs when parsing space-separated WebSocket URIs from a BACnet/SC Address...

CVE-2026-52788

The BACnet Stack C library for embedded systems contains three bugs in the bsc_node_parse_urls() function within src/bacnet/datalink/bsc/bsc-node.c. These bugs occur during the parsing of space-separated WebSocket URIs from a BACnet/SC Address Resolution ACK message. Specifically, two bugs result...

PT-2026-146957

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, the bsc node parse urls function in src/bacnet/datalink/bsc/bsc-node.c contains three distinct bugs when parsing space-separated WebSocket URIs from a BACnet/SC Address...