CVE-2026-45341
Received Received - Intake

NULL Pointer Dereference in BACnet Stack Library

Publication date: 2026-11-12

Last updated on: 2026-11-12

Assigner: GitHub, Inc.

Description
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, a NULL pointer dereference can be triggered in bacnet_device_object_reference_decode() when a WriteProperty request updates OBJECT_STRUCTURED_VIEW / PROP_SUBORDINATE_LIST. This issue has been patched in versions 1.4.4 and 1.5.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-12
Last Modified
2026-11-12
Generated
2026-11-12
AI Q&A
2026-11-12
EPSS Evaluated
N/A
NVD
CVE-2026-45341
EUVD
EUVD-2026-124656

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
bacnet-stack bacnet_stack From 1.4.0 (inc) to 1.4.4 (exc)
bacnet-stack bacnet_stack From 1.5.0 (inc) to 1.5.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the BACnet Stack library. It occurs when a WriteProperty request tries to update the PROP_SUBORDINATE_LIST property of an OBJECT_STRUCTURED_VIEW object. The function bacnet_device_object_reference_decode() receives a NULL pointer and attempts to write to it, causing a segmentation fault and denial of service.

Detection Guidance

Detecting this vulnerability requires checking the installed version of the BACnet Stack library. Use commands like 'dpkg -l | grep bacnet-stack' on Debian-based systems or 'rpm -qa | grep bacnet-stack' on RPM-based systems to verify the version. Compare the output against versions 1.4.0 to 1.4.3 and 1.5.0 to identify vulnerable installations.

Impact Analysis

This vulnerability can cause the server application to crash, leading to a denial of service. An attacker could send a specially crafted WriteProperty request to exploit this issue, potentially disrupting services that rely on the BACnet Stack library.

Mitigation Strategies

Immediately upgrade the BACnet Stack library to versions 1.4.4 or 1.5.1 or later. If upgrading is not possible, restrict network access to BACnet services to trusted sources only and monitor for unusual WriteProperty requests targeting OBJECT_STRUCTURED_VIEW or PROP_SUBORDINATE_LIST properties.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45341. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...