CVE-2026-62972

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, lightingcommanddecode in src/bacnet/lighting.c decodes its first field with the bounded apdusize - apdulen, but every nested decode in the operation switch is called with...

CVE-2026-62972

The BACnet Stack , an open source protocol stack C library for embedded systems, is vulnerable to an out-of-bounds read in the lighting_command_decode function located in src/bacnet/lighting.c. The flaw occurs because while the first field is decoded using a bounded size, subsequent nested decode...