CVE-2026-26071
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
Résumé
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
Description d'origine
La description telle que publiée par la source (souvent en anglais).
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::string concurrent access. with heap-use-after-free possible. This is triggered by EVCCID update (EV/ISO15118) and OCPP session/authorization events. Version 2026.02.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov