CVE-2026-22790
EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
Summary
EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
Original description
The description as published by the source.
EVerest is an EV charging software stack. Prior to version 2026.02.0, HomeplugMessage::setup_payload trusts len after an assert; in release builds the check is removed, so oversized SLAC payloads are memcpy'd into a ~1497-byte stack buffer, corrupting the stack and enabling remote code execution from network-provided frames. Version 2026.02.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov