CVE-2026-103672— HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index
Quick assessment
Affected
HMS Networks PEAK-System Device Driver Setup
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PEAK-System PCAN 解析器使用攻击者控制的 DLC（数据长度码）对长度表进行索引，但未强制校验 DLC ≤ 0x0f，随后将攻击者提供的有效载荷从 复制到固定大小的栈目标缓冲区中。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103672
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index
Source: CVE Program / CVE List V5
Vulnerability Description
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数组索引的验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HMS Networks | PEAK-System Device Driver Setup | 0 ~ 5.1.2.1151 | - |
|
| HMS Networks | PCAN Windows CAN device drivers | 0 ~ 5.1.2 | - |
|
II. Public POCs for CVE-2026-103672
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103672
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103672 (1)
Other References for CVE-2026-103672 (3)
Same Patch Batch · HMS Networks · 2026-10-20 · 5 CVEs total
| CVE-2026-101103 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow |
| CVE-2026-109576 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write |
| CVE-2026-105960 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Incons |
| CVE-2026-110322 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference |
IV. Related Vulnerabilities
Same product: PEAK-System Device Driver Setup
-
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handl -
CVE-2026-110322
HMS Networks PEAK-System PCAN Windows drivers Untrusted Poin -
CVE-2026-101103
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer -
CVE-2026-109576
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds
Same vendor: HMS Networks
-
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handl -
CVE-2026-110322
HMS Networks PEAK-System PCAN Windows drivers Untrusted Poin -
CVE-2026-101103
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer -
CVE-2026-109576
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds -
CVE-2025-0432
HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensit
Same weakness: CWE-129
-
CVE-2026-92449
Binary resource loader: unbounded map_id from a theme file c -
CVE-2026-48741
libIEC61850: Remote NULL dereference in MMS Read alternate-a -
CVE-2026-110934
Samsung Vyond数组索引验证不当漏洞 -
CVE-2026-92152
F´: Unvalidated Port Index in GenericHub -
CVE-2026-77375
SFTPGo: Denial of service via malformed SSH channel request
V. Comments for CVE-2026-103672
No comments yet