The vulnerability in AGL agl-service-can-low-level (up to version 17.1.12) involves a heap buffer over-read in the isotp-c library's isotp_continue_receive function. Specifically, the payload_length for a Single Frame CAN message is derived from a 4-bit nibble that can indicate a length up to 15 bytes, but the CAN frame only provides 7 payload bytes starting at data[1]. When payload_length exceeds the available data, memcpy reads beyond the buffer, leading to a heap over-read condition. This can potentially cause application crashes or information disclosure. The CVSS 3.1 score is 7.1 (High), with attack complexity low, attack vector adjacent network, no privileges required, no user interaction, and high availability impact but low confidentiality impact. No known exploits or patches are reported at this time.

The vulnerability allows an attacker with access to the CAN network to cause a heap buffer over-read, which may lead to application crashes or potential information disclosure. The impact is rated high due to the possibility of denial of service (availability impact is high), but confidentiality and integrity impacts are low or none. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor vendor communications for updates. No official remediation or temporary fixes are currently documented.