CVE-2026-47710 · Package
NO FIX YET · SEE WHAT TO DO
BACnet Stack is an open source C library for building-automation devices that speak the BACnet protocol. A long attacker-controlled description string in a Structured View object, read through a Loop object's default timer path, overflows a stack buffer.
first public Jul 5, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that build or run devices or gateways on BACnet Stack, where a Loop object reads a Structured View object's description property through the default timer path. The sources do not say whether the default configuration exposes this path to remote peers. Systems that do not use BACnet Stack, or that run a patched release, can skip it.
Not affected if patched-version
Who cares bacnet, building-automation, c, embedded
unknown if the sources do not name the build or package the team uses.1.4.4, 1.5.1, or 1.6.0, matching the release line in use.BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1.5.1, and 1.6.0, a stack-buffer-overflow can be triggered in the current master branch when a Loop object reads a referenced property through its default timer path and the referenced property is OBJECT_STRUCTURED_VIEW / PROP_DESCRIPTION containing a long attacker-controlled string. This issue has been patched in versions 1.4.4, 1.5.1, and 1.6.0.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.