Description (CNA)
PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HMS Networks / PEAK-System Device Driver Setup | affected 0 through 5.1.2.1151; unaffected 5.1.4 |
| HMS Networks / PCAN Windows CAN device drivers | affected 0 through 5.1.2; unaffected 5.1.4 |
CWE
CWE-130