CVE-2026-64675 | bacnet-stack BACnet Stack up to 1.4.4/1.5.0 Lighting src/bacnet/lighting.c xy_color_decode out-of-bounds

A vulnerability identified as critical has been detected in bacnet-stack BACnet Stack up to 1.4.4/1.5.0. Affected is the function xy_color_decode of the file src/bacnet/lighting.c of the component Lighting. Performing a manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2026-64675. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More