CVE-2026-58265 | BACnet Stack up to 1.4.4/1.5.0/1.5.x BACnet/SC Header-Option Decoder bvlc_sc_decode_proprietary_option out-of-bounds

November 13, 2026 Yanac

A vulnerability marked as critical has been reported in BACnet Stack up to 1.4.4/1.5.0/1.5.x. Affected is the function bvlc_sc_decode_proprietary_option of the component BACnet/SC Header-Option Decoder. This manipulation causes out-of-bounds read.

This vulnerability is handled as CVE-2026-58265. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More