CVE-2025-40843 — Buffer overflow in CodeChecker log command

CVE-2025-40843

Buffer overflow in CodeChecker log command PUBLISHED

Description (CNA)

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. This issue affects CodeChecker: through 6.26.1.

Affected (CNA)

Vendor / product	Versions
Ericsson / CodeChecker	affected 0 through 6.26.1

CWE

CWE-121

References

https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.