CVE-2026-109576
CVE-2026-109576 · HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
CVSS 6.8 · Medium · EPSS 0.1%
- Published
- Updated
Affected products and versions
peak-system device driver setup
- Versions
- ≥ 0, ≤ 5.1.2.1151: Affected (custom)
- 5.1.4: Not affected
No fix published
pcan windows can device drivers
- Versions
- ≥ 0, ≤ 5.1.2: Affected (custom)
- 5.1.4: Not affected
No fix published