CVE-2026-45265

Name of the Vulnerable Software and Affected Versions BACnet Stack versions prior to 1.4.4 BACnet Stack versions prior to 1.5.1

Description A stack-based out-of-bounds write occurs when the server processes a malicious Atomic-Read-File request in record access mode. A crafted request can specify an excessively large RecordCount, which is used as the loop bound for writing record data into a stack-allocated BACNET ATOMIC READ FILE DATA data structure. Because the stack object only has space for one fileData element, the loop computes an out-of-bounds pointer at i = 1, which is then passed to the memmove() function, resulting in a stack-buffer-overflow.

Recommendations Update to version 1.4.4 or later. Update to version 1.5.1 or later.