CVE-2025-24956: Siemens OPENV2G

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

Affected products

• Siemens OPENV2G: before 0.9.6 (fixed in 0.9.6)

Published 2025-02-11. Last modified 2026-06-17.