CVE-2025-68138
Medium
Description
EVerest is an EV charging software stack, and EVerest libocpp is a C++ implementation of the Open Charge Point Protocol. In libocpp prior to version 0.30.1, pointers returned by the `strdup` calls are never freed. At each connection attempt, the newly allocated memory area will be leaked, potentially causing memory exhaustion and denial of service. Version 0.30.1 fixes the issue.
SeverityMedium
CVSS4.7
Exploit probability—
ProductLinuxfoundation Libocpp
PublishedJan 21, 2026
First seenJan 21, 2026
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- linuxfoundation libocpp0.30.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxfoundation libocpp | v < 0.30.1 | 0.30.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.