Threats tagged 'ghsa-hm7q-2h38-jcwx'

AGL agl-service-can-low-level has a stack buffer overflow vulnerability in the uds-c library's send_diagnostic_request function. The function allocates a 6-byte stack buffer but copies up to 7 bytes without proper bounds checking, causing a controlled stack overflow. This affects 32-bit ARM automotive ECUs without stack canaries and can lead to return address overwrite and remote code execution.