Filtered by CWE-1046
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-23955 1 Everest 1 Everest-core 2026-01-22 4.2 Medium
EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as expected, like most of interpreted languages. This can be used by malicious operator to read unintended memory regions, including the heap and the stack. Version 2025.9.0 fixes the issue.
CVE-2025-61724 1 Golang 1 Net 2025-11-04 5.3 Medium
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.