Codechecker (Ericsson) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 86 known versions, newest CVE from 2026-08-28. Vendor: Ericsson.
CVEs of Codechecker
- CVE-2026-58107 - CVSS 5.5 (medium), 2026-08-28: CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum…
- CVE-2026-58106 - CVSS 2 (low), 2026-08-28: CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper.…
- CVE-2026-58108 - CVSS 1.2 (low), 2026-08-26: The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves…
- CVE-2026-25660 - CVSS 9.8 (critical), 2026-04-24: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the…
- CVE-2025-40843 - CVSS 7.8 (high), 2025-10-28: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1…
- CVE-2025-1300 - CVSS 6.1 (medium), 2025-02-28: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an…
- CVE-2024-53829 - CVSS 8.2 (high), 2025-01-21: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request forgery allows an…
- CVE-2024-10081 - CVSS 10 (critical), 2024-11-06: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the…
- CVE-2024-10082 - CVSS 9 (critical), 2024-11-06: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows…
- CVE-2023-49793 - CVSS 6.5 (medium), 2024-06-24: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server…
- CVE-2021-44217 - CVSS 6.1 (medium), 2022-01-18: In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote…
