Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-105960

HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HMS Networks PEAK-System Device Driver Setup

Default version status: unaffected

  • 0 to ≤ 5.1.2.1151affected
  • 5.1.4unaffected

HMS Networks PCAN Windows CAN device drivers

Default version status: unaffected

  • 0 to ≤ 5.1.2affected
  • 5.1.4unaffected

References