CVE-2026-105960

The PEAK-System PCAN Windows drivers are affected by a vulnerability involving the improper handling of length parameter inconsistency (CWE-130). The driver fails to sufficiently cap a variable-length receive-record copy to the actual caller-supplied output length, instead using a requested or qu...

EUVD-2026-105356

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

EUVD-2026-105354

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing...

CVE-2026-110322

The HMS Networks PEAK-System PCAN Windows drivers are vulnerable to an untrusted pointer dereference within the PCAN type 0x4030 processing path . The flaw occurs because the driver fails to validate a selected or returned object pointer before dereferencing fixed fields during post-processing. T...

CVE-2026-103672

The PEAK-System PCAN Windows drivers from HMS Networks are vulnerable to an Improper Validation of Array Index (CWE-129). The vulnerability exists because the PCAN parser indexes a length table using attacker-controlled DLC without enforcing the required bound of DLC

EUVD-2026-105321

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC = 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination...

EUVD-2026-105316

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2026-101103

The PEAK-System PCAN Windows drivers are vulnerable to a classic buffer overflow (CWE-120) within the diagnostic call. The root cause is a failure to validate that the caller-supplied output buffer is large enough to accommodate the output record. This vulnerability can lead to a high availabilit...

CVE-2026-109576

The PEAK-System PCAN Windows drivers are vulnerable to an Out-of-bounds Write (CWE-787) due to a logic error in the parser. While the parser correctly identifies malformed records, the loop iterating through the record list incorrectly advances the processed-bytes counter even when a record is re...

EUVD-2026-105313

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid...

EUVD-2025-28705

Malicious code in bioql PyPI...

CVE-2025-6217

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

CVE-2025-6217

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

CVE-2025-6217

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

CVE-2025-6217 PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

CVE-2025-6217

CVE-2025-6217 concerns PEAK-System Driver (PCANFD) with a flaw in the PCANFD_ADD_FILTERS IOCTL. The issue arises from a lack of proper locking when performing operations on an object, enabling Time-Of-Check Time-Of-Use information disclosure. Descriptions state that an attacker who can run low-pr...

CVE-2025-6217 PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

PEAK-System Driver security vulnerabilities

PEAK-System Driver is a driver from the German company PEAK-System. A security vulnerability exists in PEAK-System Driver that stems from improper handling of the PCANFDADDFILTERS IOCTL, which could lead to information disclosure...

CVE-2025-6217: Time-of-check Time-of-use (TOCTOU) Race Condition

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...