Ericsson codechecker vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20253
3. 20267

Newest CVEs

• CVE-2026-84161

  Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics

  Ericsson · CodeChecker

  Medium4.9
• CVE-2026-84164

  Stored XSS in the static HTML report export, because json.dumps does not escape the markup character

  Ericsson · CodeChecker

  None0.0
• CVE-2026-84155

  Session Token Remains Valid After Logout in Multi-Worker Deployments

  Ericsson · CodeChecker

  Medium5.3
• CVE-2026-58107

  Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

  Ericsson · CodeChecker

  Medium5.5
• CVE-2026-58106

  Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

  Ericsson · CodeChecker

  Low2.0
• CVE-2026-58108

  Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB

  Ericsson · CodeChecker

  Low1.2
• CVE-2026-25660

  Authentication bypass for certain API calls

  Ericsson · CodeChecker

  Critical9.3
• CVE-2025-40843

  Buffer overflow in CodeChecker log command

  Ericsson · CodeChecker

  Medium5.9
• CVE-2025-1300

  Open redirect in CodeChecker web server

  Ericsson · CodeChecker

  Medium6.1
• CVE-2024-53829

  Cross-Site Request Forgery in CodeChecker API

  Ericsson · CodeChecker

  High8.2