CVE-2026-110322

Awaiting Analysis Awaiting Analysis - Queue

PEAK-System PCAN Type 0x4030 Pointer Dereference Vulnerability

Publication date: 2026-10-20

Last updated on: 2026-10-30

Assigner: ICS-CERT

Description

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-110322

Affected Vendors & Products

Vendor	Product	Version / Range
HMS Networks	PEAK-System Device Driver Setup	0
HMS Networks	PCAN Windows CAN device drivers	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves the PEAK-System PCAN type 0x4030 processing path failing to validate an object pointer before dereferencing fixed fields during post-processing. This could lead to memory corruption or crashes if an invalid pointer is used.

Detection Guidance

This vulnerability involves a failure to validate an object pointer in PEAK-System PCAN type 0x4030 processing. Detection requires inspecting system memory and driver behavior for improper pointer handling. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

An attacker could exploit this to cause denial-of-service conditions or potentially execute arbitrary code on affected systems running the vulnerable PEAK-System PCAN drivers. Local access is required.

Compliance Impact

The vulnerability involves a failure to validate object pointers before dereferencing, which could lead to memory corruption or crashes. This type of issue may impact system reliability and integrity but does not directly affect compliance with standards like GDPR or HIPAA unless it results in unauthorized data access or processing disruptions.

Mitigation Strategies

Update or patch the PEAK-System PCAN device driver to the latest version that includes validation for object pointers. Disable or remove the affected driver if no patch is available. Monitor vendor advisories for further guidance.

Hi! I’m here to help you understand CVE-2026-110322. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...