CVE-2026-64675

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram port 47808 triggers an out-of-bounds read in xycolordecode src/bacnet/lighting.c, reachable pre-authentication through two...

EUVD-2026-125714

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram port 47808 triggers an out-of-bounds read in xycolordecode src/bacnet/lighting.c, reachable pre-authentication through two...

CVE-2026-64675 BACnet Stack: Pre-auth OOB read in xy_color_decode (BACnetXYColor) via WriteGroup/WriteProperty

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram port 47808 triggers an out-of-bounds read in xycolordecode src/bacnet/lighting.c, reachable pre-authentication through two...

CVE-2026-64675

The BACnet Stack , an open-source protocol stack C library for embedded systems, is vulnerable to an out-of-bounds read in the xy_color_decode() function located in src/bacnet/lighting.c. This flaw is triggered by a single unauthenticated BACnet/IP UDP datagram on port 47808 . The vulnerability i...