PT-2026-146961
CVE-2026-58498
·
Published
2026-11-13
·
Updated
2026-11-13
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
BACnet Stack versions prior to 1.4.5
BACnet Stack versions prior to 1.5.1
BACnet Stack versions prior to 1.6.0
Description
A remote global-buffer-overflow exists in the official router-ipv6 application. This flaw leads to an out-of-bounds write to the global transmit buffer when analyzed under ASan (AddressSanitizer, a fast memory error detector).
Recommendations
Update to version 1.4.5.
Update to version 1.5.1.
Update to version 1.6.0.
Found an issue in the description? Have something to add? Feel free to write us 👾