Stack-based Buffer Overflow in PEAK-System PCAN Parser

CVE-2026-103672

What is CVE-2026-103672?

The PEAK-System PCAN parser is prone to a stack-based buffer overflow vulnerability due to improper indexing of a length table based on attacker-controlled Data Length Code (DLC). This oversight allows an attacker to manipulate the DLC value, which is not constrained to a maximum limit of 0x0f, leading to the erroneous copying of malicious payload data from an unauthorized memory location into a predefined, fixed-size stack. Such vulnerabilities can potentially enable an attacker to execute arbitrary code or disrupt normal operations, highlighting the importance of implementing strict input validation and memory management in software.

References