CVE-2022-27242

A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

• CWE-120
• CWE-120

• https://cert-portal.siemens.com/productcert/pdf/ssa-736385.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-736385.pdfPatch, Vendor Advisory

Published

May 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27237There is a cross-site scripting (XSS) vulnerability in an NI…6.1
• CVE-2022-27238BigBlueButton version 2.4.7 (or earlier) is vulnerable to st…5.4
• CVE-2022-27239In cifs-utils through 6.14, a stack-based buffer overflow wh…7.8
• CVE-2022-2724A vulnerability was found in SourceCodester Employee Managem…9.8
• CVE-2022-27240scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 ha…9.8
• CVE-2022-27241A vulnerability has been identified in Mendix Applications u…7.5
• CVE-2022-27243An issue was discovered in MISP before 2.4.156. app/View/Use…7.8
• CVE-2022-27244An issue was discovered in MISP before 2.4.156. A malicious …4.8
• CVE-2022-27245An issue was discovered in MISP before 2.4.156. app/Model/Se…8.8
• CVE-2022-27246An issue was discovered in MISP before 2.4.156. An SVG org l…6.1
• CVE-2022-27247onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 all…5.3
• CVE-2022-27248A directory traversal vulnerability in IdeaRE RefTree before…6.5