Buffer Overflow in OpenV2G EXI Parsing Affects Product by Siemens

CVE-2022-27242

What is CVE-2022-27242?

A vulnerability exists in the OpenV2G EXI parsing feature, specifically related to the parsing of X509 serial numbers. This flaw lacks a critical length check, allowing attackers to exploit it and potentially introduce a buffer overflow. Such an attack could lead to severe memory corruption, posing a significant risk to the stability and security of the affected systems.

References