CVE-2025-68138: EVerest affected by memory exhaustion in libocpp
EVerest is an EV charging software stack, and EVerest libocpp is a C++ implementation of the Open Charge Point Protocol. In libocpp prior to version 0.30.1, pointers returned by the strdup calls are never freed. At each connection attempt, the newly allocated memory area will be leaked, potentially causing memory exhaustion and denial of service. Version 0.30.1 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68138?
CVE-2025-68138 has a high severity due to the potential for memory exhaustion which can lead to service disruption.
How do I fix CVE-2025-68138?
To mitigate CVE-2025-68138, upgrade libocpp to version 0.30.1 or later where the memory leak issue has been addressed.
What type of vulnerability is CVE-2025-68138?
CVE-2025-68138 is a memory exhaustion vulnerability caused by the improper handling of pointers in the libocpp implementation.
What software is affected by CVE-2025-68138?
CVE-2025-68138 affects EVerest libocpp versions prior to 0.30.1.
How does CVE-2025-68138 impact EV charging services?
CVE-2025-68138 can lead to service interruptions and degraded performance in EV charging services due to excessive memory consumption.