CVE-2023-51773

The BACnet Stack (an open source protocol stack C library for embedded systems, Linux, MacOS, BSD, and Windows) is vulnerable to an APDU buffer over-read in versions prior to 1.3.2 . The root cause is located in the bacapp_decode_application_data function within bacapp.c. This vulnerability allow...

CVE-2026-40279

BACnet Stack (open-source C library for embedded systems) contains a defect in decode_signed32() in src/bacnet/bacint.c where reconstructing a 32-bit signed integer from four APDU bytes via signed left shifts can overflow signed int32_t when any byte has bit 7 set (>= 0x80). This undefined beh...