This vulnerability involves a stack-based buffer overflow (CWE-121) in the signal-processing logic of the XCharge C6 charging controller. Specifically, the device fails to properly validate the length of message fields received through its charging interface. When an attacker with physical access supplies oversized message fields, it causes memory corruption that may enable execution of arbitrary code with elevated privileges. The CVSS 4.0 base score is 8.6, reflecting high impact and ease of exploitation given physical access and low attack complexity. No patch or vendor remediation level has been disclosed.

Successful exploitation allows an attacker with physical access to the charging interface to cause memory corruption and potentially execute unauthorized code with elevated privileges on the XCharge C6 device. This could compromise the device's integrity and control, potentially impacting charging operations or device safety. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict physical access to the charging interface to trusted personnel only to reduce risk. Monitor vendor communications for updates on remediation.