Description
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HMS Networks | PEAK-System Device Driver Setup | ≤ 5.1.2.1151 | 5.1.4 |
| HMS Networks | PCAN Windows CAN device drivers | ≤ 5.1.2 | 5.1.4 |
Advisories 1
- ICSA-26-293-01 HMS Networks PEAK-System PCAN Windows drivers CISA ICS & IT advisories · Oct 20, 2026