EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
Résumé
EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
Description d'origine
La description telle que publiée par la source (souvent en anglais).
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT everest_external/nodered/{connector}/cmd/switch_three_phases_while_charging message and results in Charger::shared_context / internal_context accessed concurrently without lock. Version 2026.02.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov