CVE-2025-68132

EVerest is an EV charging software stack. Prior to version 2025.12.0, "ismessagecrccorrect" in the DZGGSH01 powermeter SLIP parser reads "vecvec.size-1" and "vecvec.size-2" without checking that at least two bytes are present. Malformed SLIP frames on the serial link can reach "ismessagecrccorrec...