PT-2026-146045

CVE-2026-47259

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 3.1
8.2
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1.5.1, and 1.6.0, a RemoveListElement request targeting Notification-Class.recipient-list can trigger a stack-based out-of-bounds write in the current master branch when the request contains more than NC MAX RECIPIENTS valid BACnetDestination elements. This issue has been patched in versions 1.4.4, 1.5.1, and 1.6.0.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
CWE-121: Stack-based Buffer Overflow
Related identifiers
CVE-2026-47259
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com