CVE-2026-37530: Buffer Overflow
AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer (MAXDIAGNOSTICPAYLOADSIZE=6) but copies up to 7 bytes (MAXUDSREQUESTPAYLOADLENGTH=7) via memcpy at an offset of 1+pidlength (2-3 bytes), resulting in 1-4 bytes of controlled stack overflow. The payloadlength field (uint8t) has no bounds check against the destination buffer. On 32-bit ARM automotive ECUs without stack canaries, this can lead to return address overwrite and RCE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-37530?
CVE-2026-37530 has been classified as having a high severity due to the potential for stack buffer overflow.
How do I fix CVE-2026-37530?
To fix CVE-2026-37530, update the AGL agl-service-can-low-level to a version later than 17.1.12 where the vulnerability is addressed.
What systems are affected by CVE-2026-37530?
CVE-2026-37530 affects AGL agl-service-can-low-level versions up to and including 17.1.12.
What kind of vulnerability is CVE-2026-37530?
CVE-2026-37530 is a stack buffer overflow vulnerability that can lead to arbitrary code execution.
Is remote exploitation possible with CVE-2026-37530?
Yes, the stack buffer overflow in CVE-2026-37530 may allow for remote exploitation if the vulnerable function is exposed.