bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.

Published Jun 4, 2026 · Updated Jun 8, 2026 · Assigned by mitre