Everest (Linuxfoundation) - vulnerabilities (CVEs)

30 CVEs, 0 in the last 30 days, 65 known versions, newest CVE from 2026-03-26. Vendor: Linuxfoundation.

CVEs of Everest

• CVE-2026-33015 - CVSS 5.2 (medium), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return…
• CVE-2026-33014 - CVSS 5.2 (medium), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authorized`…
• CVE-2026-33009 - CVSS 8.2 (high), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by…
• CVE-2026-29044 - CVSS 6.5 (medium), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler…
• CVE-2026-27828 - CVSS 7.5 (high), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when…
• CVE-2026-27816 - CVSS 9.1 (critical), 2026-03-26: EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length…
• CVE-2026-27815 - CVSS 9.1 (critical), 2026-03-26: EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_session_setup copies a variable-length payment_options…
• CVE-2026-26073 - CVSS 5.9 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::queue`/`std::deque` corruption. The trigger…
• CVE-2026-27814 - CVSS 4.2 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race (C++ UB) triggered by an A 1-phase ↔ 3-phase switch request…
• CVE-2026-27813 - CVSS 5.3 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to use-after-free. This is triggered by EV plug-in/unplug and…
• CVE-2026-26074 - CVSS 7 (high), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::map<std::queue>` corruption. The trigger is…
• CVE-2026-26072 - CVSS 4.2 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access…
• CVE-2026-26070 - CVSS 4.6 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access…
• CVE-2026-26008 - CVSS 7.5 (high), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/memory…
• CVE-2026-23995 - CVSS 8.4 (high), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name…
• CVE-2026-26071 - CVSS 4.2 (medium), 2026-03-26: EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::string` concurrent access. with heap-use-after-free…
• CVE-2026-22790 - CVSS 8.8 (high), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the…
• CVE-2026-22593 - CVSS 8.4 (high), 2026-03-26: EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer…
• CVE-2020-37140 - CVSS 5.5 (medium), 2026-02-05: Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by…
• CVE-2026-24003 - CVSS 5.3 (medium), 2026-01-26: EVerest is an EV charging software stack. In versions up to and including 2025.12.1, it is possible to bypass the sequence state verification including…
• CVE-2026-23955 - CVSS 4.2 (medium), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing…
• CVE-2025-68139 - CVSS 4.3 (medium), 2026-01-21: EVerest is an EV charging software stack. In all versions up to and including 2025.12.1, the default value for `terminate_connection_on_failed_response` is…
• CVE-2025-68141 - CVSS 7.4 (high), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well…
• CVE-2025-68140 - CVSS 4.3 (medium), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether…
• CVE-2025-68137 - CVSS 8.4 (high), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer…
• CVE-2025-68136 - CVSS 7.4 (high), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like…
• CVE-2025-68135 - CVSS 6.5 (medium), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the `TbdController` loop, leading to…
• CVE-2025-68134 - CVSS 7.4 (high), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors frequently causes the module to crash.…
• CVE-2025-68132 - CVSS 4.6 (medium), 2026-01-21: EVerest is an EV charging software stack. Prior to version 2025.12.0, `is_message_crc_correct` in the DZG_GSH01 powermeter SLIP parser reads…
• CVE-2025-68133 - CVSS 7.4 (high), 2026-01-21: EVerest is an EV charging software stack. In versions 2025.9.0 and below, an attacker can exhaust the operating system's memory and cause the module to…