CVE-2026-82414
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
63/100
Published: 2026-11-13
Modified: 2026-11-13
First seen: 2026-11-13
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.6, 1.5.0 to before 1.5.1, and 1.6.0 to before 1.6.1, the BACnet MS/TP receive path decodes COBS frames into an output pointer inside the same fixed input buffer, but passes the full input-buffer size as the decode capacity. A long valid COBS payload can therefore write past the end of the actual remaining buffer. This issue has been patched in versions 1.4.6, 1.5.1, 1.6.1, and 1.7.0.
Weakness Classification (1)
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| bacnet-stack | bacnet-stack | >= 1.4.0, < 1.4.6 |
| bacnet-stack | bacnet-stack | >= 1.5.0, < 1.5.1 |
| bacnet-stack | bacnet-stack | >= 1.6.0, < 1.6.1 |
| bacnet-stack | bacnet-stack | >= 1.4.0, < 1.4.6 |
| bacnet-stack | bacnet-stack | >= 1.5.0, < 1.5.1 |
| bacnet-stack | bacnet-stack | >= 1.6.0, < 1.6.1 |
References & Advisories (2)
x_refsource_MISC
x_refsource_CONFIRM