PT-2026-146039

CVE-2026-46674

·

Publicado

2026-11-12

·

Atualizado

2026-11-12

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, an out-of-bounds read vulnerability exists in bacnet-stack's AtomicWriteFile record-access path. The bug is caused by a mismatch between an externally controlled returnedRecordCount field and the fixed-size internal fileData[] array used by BACNET ATOMIC WRITE FILE DATA. This issue has been patched in versions 1.4.4 and 1.5.1.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-121: Stack-based Buffer Overflow
CWE-125: Out-of-bounds Read
Identificadores relacionados
CVE-2026-46674
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com