CVE-2026-100403

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC hub's Linux WebSocket server reassembles fragmented WebSocket messages into a per-connection fragmentbuffer. It grows that buffer with realloc on every...

CVE-2026-100403

The BACnet Stack , an open source C library for embedded systems, contains a vulnerability in the BACnet/SC hub's Linux WebSocket server . The server reassembles fragmented WebSocket messages into a per-connection fragment_buffer using realloc(), but lacks an upper bound on growth. A remote peer ...