CVE-2026-8987

Summary

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution.

Affected Software

Weaknesses

• CWE-122: CWE-122 Heap-based buffer overflow

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/

• ←Previous
• Next→