Skip to main content

Missing Report of Error Condition

CVE-2025-59398

Low
3.1/10

Summary

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created with StringTooLarge set to Throw.

  • HIGH
  • ADJACENT_NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-392 - Missing Report of Error Condition

The software encounters an error but does not provide a status code or return value to indicate that an error has occurred.

References

Advisory Timeline

  • Published