{"affected":[{"product":"bacnet-stack","source":"CNA: GitHub_M","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.5"},{"status":"affected","version":"< 1.5.1"},{"status":"affected","version":"< 1.6.0"}]}],"cveId":"CVE-2026-58498","cwes":["CWE-787"],"description":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffer-overflow in the official router-ipv6 application shipped with bacnet-stack, this results in an out-of-bounds write to the global transmit buffer under ASan. This issue has been patched in versions 1.4.5, 1.5.1, and 1.6.0.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","version":"3.1"}],"modifiedAt":1794585467797,"publishedAt":1794585467797,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4p4w-m434-jrhj"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/bacnet-stack/bacnet-stack/pull/1392"}],"remediation":[],"revision":"4ba7154487fc91dfd99a658e131650df50b5f5497d2485f7c1d78a15d3554ca7","sources":[{"modifiedAt":1794585467797,"name":"CNA: GitHub_M","retrievedAt":1794586301073,"url":"https://www.cve.org/CVERecord?id=CVE-2026-58498"}],"ssvc":null,"status":"published","title":"BACnet Stack: Remote global-buffer-overflow in apps/router-ipv6/main.c routed APDU forwarding path","updatedAt":1794586301073}