CVE-2026-38570

Name of the Vulnerable Software and Affected Versions bacnet stack version 1.3.1

Description An out-of-bounds read exists in the bacnet tag number decode() function, which can be exploited by attackers to cause a denial of service. An out-of-bounds read occurs when the software reads data past the end of the intended buffer.

Recommendations As a temporary workaround, consider restricting the use of the bacnet tag number decode() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.