CVE-2023-51773

The BACnet Stack , an open-source protocol stack library for embedded systems, Linux, MacOS, BSD, and Windows, is vulnerable to an APDU buffer over-read in versions prior to 1.3.2 . The root cause is located in the bacapp_decode_application_data function within the bacapp.c file. This vulnerabili...

CVE-2026-40279

BACnet Stack (open-source C library for embedded systems) contains a defect in decode_signed32() in src/bacnet/bacint.c where reconstructing a 32-bit signed integer from four APDU bytes via signed left shifts can overflow signed int32_t when any byte has bit 7 set (>= 0x80). This undefined beh...