CVE-2026-9038CWE-121

Stack-based buffer overflow in XCharge C6

High · published May 28, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently validated, memory corruption may occur, which can lead to execution of unauthorized code with elevated privileges.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-05-28T19:05Z
EPSS history
Timeline
  • 28 MAY 19:05Z
    Stack-based buffer overflow in XCharge C6
    cvelistv5