← CVE Intelligence

CVE-2026-109576

HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write PUBLISHED

Description (CNA)

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.

Affected (CNA)

Vendor / productVersions
HMS Networks / PEAK-System Device Driver Setupaffected 0 through 5.1.2.1151; unaffected 5.1.4
HMS Networks / PCAN Windows CAN device driversaffected 0 through 5.1.2; unaffected 5.1.4

CWE

CWE-787

References