CVE-2025-24956CWE-120

A vulnerability has been identified in OpenV2G (All versions < V0.9.6)

Medium · published February 11, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00403 · 33.4th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-02-11T10:29Z
EPSS history
Timeline
  • 11 FEB 10:29Z
    A vulnerability has been identified in OpenV2G (All versions < V0.9.6)
    cvelistv5