CVE-2025-40843CWE-121

CVE-2025-40843

Medium · published October 28, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.

This issue affects CodeChecker: through 6.26.1.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-10-28T23:15Z
Affected products (1)
ProductVersionsFixed in
ericsson/codechecker< 6.26.26.26.2
References (1)
https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r · 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
EPSS history
Timeline
  • 28 OCT 18:49Z
    Buffer overflow in CodeChecker log command
    cvelistv5