CVE-2026-64675 · Package
NO FIX YET · SEE WHAT TO DO
BACnet Stack is an open source BACnet protocol C library used in embedded building-automation devices. A single unauthenticated BACnet/IP UDP packet on port 47808 can trigger an out-of-bounds read in the lighting color decoder, which can crash or leak memory.
first public Jul 5, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Products that embed the BACnet Stack C library and expose BACnet/IP on UDP port 47808 with the lighting WriteGroup or WriteProperty services registered by default. Systems that do not run BACnet/IP or keep the port off untrusted networks are less exposed. unknown whether the sources list more detail.
Not affected if no-bacnet-ip, port-47808-filtered
Who cares bacnet, building-automation, c, embedded
47808 reachable from untrusted networks.1.4.5, 1.5.1, or 1.6.0 (the patched versions for their release lines).BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram (port 47808) triggers an out-of-bounds read in xy_color_decode() (src/bacnet/lighting.c), reachable pre-authentication through two default-registered service handlers: the UnconfirmedRequest WriteGroup service (0x0A) and Confirmed WriteProperty on a BACnetXYColor-typed property. This issue has been patched in versions 1.4.5, 1.5.1, and 1.6.0.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.