What’s Vulnerable › Products

Ericsson CodeChecker vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Ericsson CodeChecker version is affected

Latest Ericsson CodeChecker vulnerabilities

• CVE-2026-58107 — Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun (CVSS 5.5)
• CVE-2026-58106 — Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation (CVSS 2.0)
• CVE-2026-58108 — Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB (CVSS 1.2)
• CVE-2026-25660 — Authentication bypass for certain API calls (CVSS 9.8)
• CVE-2025-40843 — Buffer overflow in CodeChecker log command (CVSS 7.8)
• CVE-2025-1300 — Open redirect in CodeChecker web server (CVSS 6.1)
• CVE-2024-53829 — Cross-Site Request Forgery in CodeChecker API (CVSS 8.2)
• CVE-2024-10082 — (CVSS 9.0)
• CVE-2024-10081 — (CVSS 10.0)
• CVE-2023-49793 — Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store` (CVSS 6.5)
• CVE-2021-44217 — (CVSS 6.1)