CVE-2026-47217: BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP server
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been patched in versions 1.4.4 and 1.5.1.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
bacnet-stackto a version that resolves this vulnerability.Fixed in 1.4.4 - Upgrade
Upgrade
bacnet-stackto a version that resolves this vulnerability.Fixed in 1.5.1
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the default BACnet/IP server application in bacnet-stack are affected before versions 1.4.4 and 1.5.1. The issue is remotely reachable over the network.
What does an attacker need to exploit this issue?
An attacker does not need privileges or user interaction. They can abuse the Channel object to trigger uncontrolled recursion and a stack overflow.
What is the likely impact of successful exploitation?
Successful exploitation can cause a stack overflow and affect availability of the vulnerable server application. The supplied severity vector indicates no confidentiality or integrity impact.
What should be done to remediate the issue?
Upgrade bacnet-stack to version 1.4.4 or 1.5.1, which include the patch.