CVE-2026-8987 Authenticated Heap Overflow

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the setapparam command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution...

CVE-2026-8987

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the setapparam command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution...

PT-2026-62418

Name of the Vulnerable Software and Affected Versions Autel Maxi Charger Single versions prior to V1.03.52 Description A heap-based buffer overflow occurs in the set ap param command processed by the '/localcfg' endpoint. An authenticated attacker can provide oversized input to trigger this issue...