CVE-2026-26264 | bacnet-stack BACnet Stack up to 1.4.3rc1/1.5.0rc3 wp.c wp_decode_service_request out-of-bounds (GHSA-phjh-v45p-gmjj)

A vulnerability was found in bacnet-stack BACnet Stack up to 1.4.3rc1/1.5.0rc3. It has been rated as problematic. Impacted is the function wp_decode_service_request of the file wp.c. Performing a manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-26264. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.