EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

Description

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structure is accessed out of bounds. This occurs in the method `template <> void convert(const struct iso20_dc_DetailedTaxType& in, datatypes::DetailedTax& out)` which leads to a null pointer dereference and causes the module to terminate. The EVerest processes and all its modules shut down, affecting all EVSE. Version 2025.10.0 fixes the issue.

Scores

EPSS (exploitation in 30 days)

0.28% · top 79% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.4.

Weakness

• CWE-476: NULL Pointer Dereference (opens in a new tab)All about CWE-476 and its CVEs

Affected products

• EVerest · everest-core

  • affected < 2025.10.0

References (1)

• https://github.com/EVerest/everest-core/security/advisories/GHSA-ph4w-r9q8-vm9h (opens in a new tab)x_refsource_CONFIRM

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2025-68141](https://trackcve.app/badge/CVE-2025-68141.svg)](https://trackcve.app/cve/CVE-2025-68141)

Record last updated 22 Jan 2026, 16:50 UTC.