MEDIUM🇵🇱 Wersja polska

CVE-2025-40843

CVSS 5.9v3.1pub. 2025-10-28upd. 2025-11-14

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. This issue affects CodeChecker: through 6.26.1.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Ericsson Codechecker

    APP
    Ericsson
    < 6.26.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2026-25660CRITICAL9.3PL ✓ten sam produkt

Ericsson CodeChecker — Authentication Bypass umożliwiający eskalację uprawnień

CVE-2024-10081CRITICAL10.0PL ✓ten sam produkt

Authentication bypass w Ericsson CodeChecker — pełny dostęp do API

CVE-2024-53829HIGH8.2ten sam produkt

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Cla...

CVE-2024-10082HIGH8.7ten sam produkt

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Cla...

CVE-2025-1300MEDIUM6.1ten sam produkt

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Cla...