CVE-2025-59399

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-59399

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-59399.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-59399

Published

2025-09-15T19:15:36Z

Modified

2025-09-17T05:20:52.891840Z

Summary

[none]

Details

libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.

References

Affected packages

Git / github.com/everest/libocpp

Affected ranges

Type: GIT
Repo: https://github.com/everest/libocpp
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

0b84d7f9fb3c338d470770f220a7b7f21db78878

Affected versions

v0.*

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.13.1

v0.14.0

v0.15.0

v0.15.1

v0.16.0

v0.16.1

v0.16.2

v0.17.0

v0.17.1

v0.17.2

v0.18.0

v0.19.0

v0.2.0

v0.20.0

v0.21.0

v0.22.0

v0.23.0

v0.24.1

v0.24.2

v0.25.0

v0.26.0

v0.26.1

v0.26.2

v0.26.3

v0.27.0

v0.27.1

v0.3.0

v0.4.0

v0.4.1

v0.5.0

v0.5.1

v0.5.2

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.8.5

v0.8.6

v0.8.7

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

Database specific

{
    "vanir_signatures": [
        {
            "target": {
                "file": "lib/ocpp/v16/charge_point_impl.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "209766885764611737436061403239945851995",
                    "204607136026051847477249598771079154876",
                    "44497115711603872977858537783534423145",
                    "223698307619159020692220161236927047827"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/everest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878",
            "deprecated": false,
            "id": "CVE-2025-59399-46b7232d",
            "signature_version": "v1"
        },
        {
            "target": {
                "file": "lib/ocpp/v2/charge_point.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "25299234459406031840467776679802719044",
                    "315094674306320564597409304336019623839",
                    "202270899290576842256687279282073161545",
                    "220080872456833072388885539846130812774",
                    "74478917301716849278263463923932173945",
                    "119640511448671455571851835210788760523",
                    "189603367973680004910531522292522279197",
                    "329914649163498463201405919058363773259",
                    "44080981853222821786728701797325728186",
                    "204151417930325884373647217420963107175",
                    "112366757567264701845825871729671194369",
                    "113682744450741709582099387594592368450",
                    "202270899290576842256687279282073161545",
                    "220080872456833072388885539846130812774"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/everest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878",
            "deprecated": false,
            "id": "CVE-2025-59399-60cde900",
            "signature_version": "v1"
        },
        {
            "target": {
                "file": "lib/ocpp/v2/charge_point.cpp",
                "function": "ChargePoint::message_callback"
            },
            "digest": {
                "function_hash": "309955338134842391307232244633507256553",
                "length": 8891.0
            },
            "signature_type": "Function",
            "source": "https://github.com/everest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878",
            "deprecated": false,
            "id": "CVE-2025-59399-8e7f5a9b",
            "signature_version": "v1"
        },
        {
            "target": {
                "file": "lib/ocpp/v16/charge_point_impl.cpp",
                "function": "ChargePointImpl::message_callback"
            },
            "digest": {
                "function_hash": "180844700051127089775644504739232904775",
                "length": 6113.0
            },
            "signature_type": "Function",
            "source": "https://github.com/everest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878",
            "deprecated": false,
            "id": "CVE-2025-59399-d90f7805",
            "signature_version": "v1"
        }
    ]
}