CVE-2026-95390 in Wireshark
Summary
by MITRE • 09/29/2026
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 09/29/2026
The vulnerability identified within PEAK-System's TRC file parser, affecting versions 4.6.0 through 4.6.8, represents a critical stability issue that can be exploited to cause a denial of service against systems relying on this software for CAN bus data analysis and logging. The core technical flaw resides in the parsing logic responsible for interpreting Traffic Control (TRC) files, which are commonly used to record Controller Area Network traffic. When the parser encounters specific malformed or maliciously crafted input sequences within these log files, it fails to properly validate memory allocation boundaries or handle edge cases during data extraction. This lack of robust input validation leads to an out-of-bounds read or write operation, resulting in a segmentation fault and immediate application crash. The vulnerability is primarily classified under CWE-125, which denotes Out-of-Bounds Read, as the parser attempts to access memory locations that are not allocated for the current data structure, thereby corrupting the process state and terminating execution unexpectedly.
From an operational perspective, this denial of service impacts users who automate the processing of CAN bus logs or integrate PEAK-System tools into larger diagnostic workflows. An attacker with the ability to supply a malicious TRC file can trigger the crash remotely if the software is configured to automatically parse incoming files without user intervention, such as in automated testing environments or shared network directories where untrusted data sources might be present. Even in manual usage scenarios, an analyst opening a compromised log file would experience immediate tool failure, disrupting workflow and potentially leading to loss of unsaved work or analysis progress. This aligns with the MITRE ATT&CK technique T1499, Endpoint Denial of Service, where the objective is not data exfiltration but rather the disruption of system availability and operational continuity. The impact extends beyond simple inconvenience; in industrial control systems or automotive diagnostics environments where continuous monitoring is required, such crashes can create blind spots during critical testing phases or maintenance windows.
Mitigation strategies for this vulnerability focus on immediate software updates and defensive configuration practices. Users running versions 4.6.0 to 4.6.8 must upgrade to the latest patched version released by PEAK-System Technology, which includes fixes for the memory handling logic in the TRC parser. Until an update is applied, administrators should implement strict input filtering policies if possible, ensuring that only trusted and verified log files are processed by the application. Additionally, deploying sandboxing solutions or running the analysis software within isolated virtual environments can contain the impact of a potential crash, preventing it from affecting host system stability. Security teams should also monitor for unusual process termination events associated with the PEAK-System executable as an indicator of compromise attempts targeting this specific flaw. Regular patch management and adherence to vendor security advisories remain the most effective defense against such memory corruption vulnerabilities that exploit parsing logic flaws in specialized engineering tools.