cvedb.io
CVE-2026-9038
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2026-05-28T20:16:27.227 · Last modified 2026-06-17T11:04:45.843

Summary

A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently validated, memory corruption may occur, which can lead to execution of unauthorized code with elevated privileges.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.