CVE-2025-40843

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-40843

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40843.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-40843

Aliases

Published

2025-10-28T18:49:49.516Z

Modified

2026-07-08T07:01:22.870179874Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

Buffer overflow in CodeChecker log command

Details

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.

This issue affects CodeChecker: through 6.26.1.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40843.json",
    "cna_assigner": "ERIC",
    "cwe_ids": [
        "CWE-121"
    ]
}

References

Affected packages

Git / github.com/ericsson/codechecker

Affected ranges

Type

GIT

Repo

https://github.com/ericsson/codechecker

Events

Introduced

Fixed

fa596ef3c6e5245d18b494683adaeb42af265cad

Database specific

{
    "cpe": "cpe:2.3:a:ericsson:codechecker:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.26.1"
        },
        {
            "fixed": "6.26.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v4.*

v4.0

v5.*

v5.0

v5.1

v5.10

v5.2

v5.3

v5.4

v5.5

v5.6

v5.7

v5.7.1

v5.8

v5.9

v6.*

v6.0

v6.0.1

v6.1

v6.1.1

v6.10.0

v6.12.0

v6.13.0

v6.14.0

v6.15.0

v6.16.0

v6.17.0

v6.18.0

v6.19.0

v6.2

v6.2.1

v6.20.0

v6.21.0

v6.22.0

v6.23.0

v6.23.0-rc1

v6.24.0

v6.25.0

v6.26.0

v6.26.1

v6.3

v6.4

v6.5

v6.5.1

v6.6.0

v6.7.0

v6.7.1

v6.8.0

v6.8.1

v6.9.0

v6.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40843.json"