CVE-2022-27242CWE-120

A vulnerability has been identified in OpenV2G (V0.9.4)

published May 10, 2022

CVSS
—
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-05-10T09:47Z
EPSS history
Timeline
  • 10 MAY 09:47Z
    A vulnerability has been identified in OpenV2G (V0.9.4)
    cvelistv5