The vulnerability in AGL agl-service-can-low-level (up to version 17.1.12) is due to a stack buffer overflow in the uds-c library's send_diagnostic_request function. This function allocates a fixed 6-byte buffer but copies up to 7 bytes based on the payload_length field without bounds checking, causing a 1-4 byte overflow on the stack. This overflow can overwrite the return address on 32-bit ARM automotive ECUs that do not implement stack canaries, enabling potential remote code execution. The issue stems from a lack of validation on the payload_length field and unsafe use of memcpy. No CVSS score or vendor patch information is currently available.

The vulnerability can lead to remote code execution on affected 32-bit ARM automotive ECUs without stack canaries by overwriting the return address on the stack. This could allow an attacker to execute arbitrary code with the privileges of the affected service. There are no known exploits in the wild at this time. The impact is limited to automotive environments using the vulnerable uds-c library version.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating risk by restricting access to the affected service and monitoring for anomalous diagnostic requests. No vendor advisory or patch links are currently provided.