Vulnerability · Published Jan 21, 2026 · Assigned by GitHub_M

CVE-2025-68141EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

High 7.4

In plain English

A high-severity null pointer dereference in everest-core from EVerest. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.3%top 79.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structure is accessed out of bounds. This occurs in the method `template <> void convert(const struct iso20_dc_DetailedTaxType& in, datatypes::DetailedTax& out)` which leads to a null pointer dereference and causes the module to terminate. The EVerest processes and all its modules shut down, affecting all EVSE. Version 2025.10.0 fixes the issue.

Affected products (as reported)

Vendor	Product	Versions
EVerest	everest-core	< 2025.10.0

Weakness: CWE-476 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References

https://github.com/EVerest/everest-core/security/advisories/GHSA-ph4w-r9q8-vm9h x_refsource_CONFIRM