UNKNOWNCVE-2026-22593

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

Platform

other

Component

everest-core

Fixed in

2026.02.0

EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer overflow when a filename length equals `MAX_FILE_NAME_LENGTH` (100). A crafted filename in the certificate directory can overflow `file_names[idx]`, corrupting stack state and enabling potential code execution. Version 2026.02.0 contains a patch.

How to fix

Actualice EVerest a la versión 2026.02.0 o posterior. Esta versión contiene una corrección para el desbordamiento de búfer basado en pila en el manejo de nombres de archivo de certificado IsoMux.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free