CVE-2025-68138 is a memory leak vulnerability in EVerest libocpp, a C++ implementation of the Open Charge Point Protocol used in EV charging software stacks. Prior to version 0.30.1, the software fails to free memory allocated by `strdup` calls during connection attempts, leading to potential memory exhaustion and denial of service. This vulnerability has a CVSS score of 4.7 (MEDIUM) and can be exploited with low attack complexity over an adjacent network without requiring user interaction. The primary impact is a denial of service due to resource exhaustion. There is currently no evidence of active exploitation, nor are there publicly available exploit modules for Metasploit, Nuclei, or ExploitDB. Despite this, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.30.1CPE matchmatch criteria | cpe:2.3:a:linuxfoundation:libocpp:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.