Skip to content
OpenAdvisories
High · 7.5 CVE-2026-49341 EUVD-2026-125530

BACnet Stack: Uncontrolled recursion in Timer object writeback path leads to remote server stack overflow

Published Nov 13, 2026 · Assigned by GitHub_M

Description

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, there is a remotely reachable denial-of-service vulnerability in bacnet-stack affecting the default demo server built from the unmodified apps/server/main.c. This issue has been patched in version 1.5.1.

Affected products

VendorProductAffectedFixed
bacnet-stack bacnet-stack < 1.5.1 —

References