Vulnerabilidades do Ericsson Codechecker
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ericsson Codechecker: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:ericsson:codechecker
CVE-2026-25660
Crítica · 9.8
CWE-290 24/04/2026
Authentication bypass for certain API calls
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in CodeChecker.
This issue affects CodeChecker: through 6.27.3.
CVE-2025-40843
Alta · 7.8
CWE-121 28/10/2025
Buffer overflow in CodeChecker log command
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.
This issue affects CodeChecker: through 6.26.1.