CVE-2026-49990 | bacnet-stack BACnet Stack up to 1.4.4/1.5.0 RAM file backend AtomicReadFile/AtomicWriteFile fileStartPosition out-of-bounds write

A vulnerability labeled as critical has been found in bacnet-stack BACnet Stack up to 1.4.4/1.5.0. This impacts the function AtomicReadFile/AtomicWriteFile of the component RAM file backend. The manipulation of the argument fileStartPosition results in out-of-bounds write.

This vulnerability is known as CVE-2026-49990. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More