CVE-2025-68141 - EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document ...

CVE ID : CVE-2025-68141 Published : Jan. 21, 2026, 8:16 p.m. | 1 hour, 16 minutes ago Description : EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `tax_costs` in the target `Receipt` structure is accessed out of bounds. This occurs in the method `template void convert(const struct iso20_dc_DetailedTaxType& in, datatypes::DetailedTax& out)` which leads to a null pointer dereference and causes the module to terminate. The EVerest processes and all its modules shut down, affecting all EVSE. Version 2025.10.0 fixes the issue. Severity: 7.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...