CVE-2022-27242

A vulnerability has been identified in OpenV2G V0.9.4. The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption...

CVE-2022-27242

A vulnerability has been identified in OpenV2G V0.9.4. The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption...

CVE-2022-27242

CVE-2022-27242 affects Siemens OpenV2G v0.9.4. The OpenV2G EXI parsing feature lacks a length check when parsing X509 serial numbers, enabling a potential buffer overflow and memory corruption. Public advisories (Siemens SSA-736385 and related sources) indicate Siemens released v0.9.5 as a remedi...