CVE-2026-62977 | bacnet-stack BACnet Stack up to 1.5.0 FILE object implementation AtomicReadFile PROP_FILE_SIZE uninitialized variable

November 13, 2026 Yanac

A vulnerability classified as critical has been found in bacnet-stack BACnet Stack up to 1.5.0. Affected by this vulnerability is the function AtomicReadFile of the component FILE object implementation. The manipulation of the argument PROP_FILE_SIZE leads to use of uninitialized variable.

This vulnerability is documented as CVE-2026-62977. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More