AGL agl-service-can-low-level versions through 17.1.12 contain a heap buffer over-read vulnerability in the isotp-c library. The flaw occurs when processing Single Frame CAN messages, where the payload length extracted from a 4-bit nibble can exceed the actual available data bytes, leading to out-of-bounds memory reads. This can cause a denial of service due to application crash or other memory corruption effects.