CVE-2026-42485: Buffer Overflow
AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer (MAXDIAGNOSTICPAYLOADSIZE=6) but copies up to 7 bytes (MAXUDSREQUESTPAYLOADLENGTH=7) via memcpy at an offset of 1+pidlength (2-3 bytes), resulting in 1-4 bytes of controlled stack overflow. The payloadlength field (uint8t) has no bounds check against the destination buffer. On 32-bit ARM automotive ECUs without stack canaries, this can lead to return address overwrite and RCE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42485?
CVE-2026-42485 has a high severity rating due to the potential for a stack buffer overflow leading to arbitrary code execution.
How do I fix CVE-2026-42485?
To fix CVE-2026-42485, update the affected agl-service-can-low-level package to the latest version that addresses this vulnerability.
What software is affected by CVE-2026-42485?
The affected software includes the Automotive Grade Linux agl-service-can-low-level that utilizes the uds-c library.
What type of vulnerability is CVE-2026-42485?
CVE-2026-42485 is classified as a stack buffer overflow vulnerability.
How can CVE-2026-42485 be exploited?
CVE-2026-42485 can be exploited by sending an oversized diagnostic request which may lead to buffer overflow and potential system compromise.