Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-109576

HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HMS Networks PEAK-System Device Driver Setup

Default version status: unaffected

  • 0 to ≤ 5.1.2.1151affected
  • 5.1.4unaffected

HMS Networks PCAN Windows CAN device drivers

Default version status: unaffected

  • 0 to ≤ 5.1.2affected
  • 5.1.4unaffected

References