CVE-2025-59398

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via...

3.1 Low

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created with StringTooLarge set to Throw.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.24%Up 0.2 points since Sep 16, 2025

What each source reports

CVE List Score used 3.1

Record: CVE-2025-59398
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-392
Updated: 2026-11-02

EUVDEUVD-2025-29233 3.1

Record: EUVD-2025-29233
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-9j3x-w929-5ch3 3.1

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via...

Record: GHSA-9j3x-w929-5ch3
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-392
Updated: 2026-11-02

NVD 3.1

Record: CVE-2025-59398
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-392
Updated: 2026-11-02

OSV 3.1

Record: CVE-2025-59398
CVSS 3.1: 3.1 LowCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-392
Updated: 2026-11-02

Affected products

everest libocpp

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-59398 is a low vulnerability (CVSS 3.1) in Everest Libocpp, published September 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. No source names a fixed version.