PCAN Windows CAN device drivers vulnerabilities

1 known vulnerability in PCAN Windows CAN device drivers from HMS Networks. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  PEAK-System Device Driver Setup: Improper Validation of Array Index

  CVE-2026-103672Oct 20, 2026HMS Networks

  The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.