Description (CNA)
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HMS Networks / PEAK-System Device Driver Setup | affected 0 through 5.1.2.1151; unaffected 5.1.4 |
| HMS Networks / PCAN Windows CAN device drivers | affected 0 through 5.1.2; unaffected 5.1.4 |
CWE
CWE-129