CVE-2025-68138CWE-770

EVerest affected by memory exhaustion in libocpp

Medium · published January 21, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

EVerest is an EV charging software stack, and EVerest libocpp is a C++ implementation of the Open Charge Point Protocol. In libocpp prior to version 0.30.1, pointers returned by the `strdup` calls are never freed. At each connection attempt, the newly allocated memory area will be leaked, potentially causing memory exhaustion and denial of service. Version 0.30.1 fixes the issue.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-21T19:30Z
EPSS history
Timeline
  • 21 JAN 19:30Z
    EVerest affected by memory exhaustion in libocpp
    cvelistv5