CVE-2024-37310
EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
Summary
EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
Original description
The description as published by the source.
EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web github.com
- web plaxidityx.com