Threats tagged 'ghsa-6q94-5hqp-c754'

CVE-2026-103672 is a high-severity vulnerability in the HMS Networks PEAK-System Device Driver Setup. It involves improper validation of an array index where the device driver uses an attacker-controlled DLC value to index a length table without enforcing an upper bound check (DLC <= 0x0f). This leads to copying attacker-controlled payload data into a fixed-size stack buffer, potentially causing memory corruption.