Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-109576 EUVD-2026-105313GHSA-5m25-2x5h-hg85

HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

Published Oct 20, 2026 · Updated Oct 29, 2026 · Assigned by icscert

Description

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.

Affected products

VendorProductAffectedFixed
HMS Networks PEAK-System Device Driver Setup ≤ 5.1.2.1151 5.1.4
HMS Networks PCAN Windows CAN device drivers ≤ 5.1.2 5.1.4

Advisories 1

References