Everest-core security vulnerabilities

Everest-core is a major component of the open-source electric vehicle charging software stack developed by EVerest. Versions of Everest-core prior to 2025.10.0 contained security vulnerabilities. These vulnerabilities stemmed from modules failing to close and destroy previously created objects wh...

Towards a Formal Verification of Secure Vehicle Software Updates

With the rise of software-defined vehicles SDVs, where software governs most vehicle functions alongside enhanced connectivity, the need for secure software updates has become increasingly critical. Software vulnerabilities can severely impact safety, the economy, and society. In response to this...

CVE-2020-10558

CVE-2020-10558 affects the Tesla Model 3 driving interface in any release prior to 2020.4.10. The issue is a Denial of Service caused by improper process separation, enabling an attacker to disable the speedometer, web browser, climate controls, turn signal visuals and sounds, navigation, autopil...