Ericsson CodeChecker

• CVE-2026-58107 Medium 5.5 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun 0.4%
• CVE-2026-58106 Low 2.0 Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation 0.2%
• CVE-2026-58108 Low 1.2 Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB 0.3%
• CVE-2026-25660 Critical 9.3 Authentication bypass for certain API calls 0.4%
• CVE-2025-40843 Medium 5.9 Buffer overflow in CodeChecker log command 0.2%
• CVE-2025-1300 Medium 6.1 Open redirect in CodeChecker web server 0.3%
• CVE-2024-53829 High 8.2 Cross-Site Request Forgery in CodeChecker API 0.3%
• CVE-2024-10082 High 8.7 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from 0.5%
• CVE-2024-10081 Critical 10.0 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This byp 39.9%
• CVE-2023-49793 Medium 6.5 Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store` 0.7%