Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-103672

HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HMS Networks PEAK-System Device Driver Setup

Default version status: unaffected

  • 0 to ≤ 5.1.2.1151affected
  • 5.1.4unaffected

HMS Networks PCAN Windows CAN device drivers

Default version status: unaffected

  • 0 to ≤ 5.1.2affected
  • 5.1.4unaffected

References