CVE-2026-52790

The BACnet Stack C library for embedded systems contains a library-level memory safety issue in versions prior to 1.4.5, 1.5.1, and 1.6.0 . The vulnerability, located in writable Device string properties, is reachable via an unmodified official sample server (apps/server-basic/main.c) over BACnet...

CVE-2026-52790 BACnet Stack: bacnet_device.c stack-use-after-return in writable Device string properties

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a library-level memory safety issue that is reachable from an unmodified official sample server apps/server-basic/main.c over BACnet/IP resulting in a...