Threat database

CVE-2025-68138 is a medium severity vulnerability in the EVerest libocpp library, a C++ implementation of the Open Charge Point Protocol used in EV charging software. The flaw involves a memory leak caused by failure to free memory allocated by strdup calls during connection attempts. This can lead to memory exhaustion and denial of service on affected systems running libocpp versions prior to 0.30.1. Exploitation requires network access but no authentication or user interaction. The vulnerability impacts availability but not confidentiality or integrity. No known exploits are reported in the wild yet. The issue is fixed in libocpp version 0.30.