Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-40843

Buffer overflow in CodeChecker log command

Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. This issue affects CodeChecker: through 6.26.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ericsson CodeChecker

Default version status: unaffected

  • 0 to ≤ 6.26.1affected

References