Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-37310 EUVD-2024-36981

EVerest has an integer overflow in the "v2g_incoming_v2gtp" function

Published Jul 10, 2024 · Updated Dec 16, 2024 · Assigned by GitHub_M

Description

EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0.

Affected products

VendorProductAffectedFixed
EVerest everest-core < 2024.3.1, >= 2024.4.0, < 2024.6.0 —

References