Ericsson codechecker vulnerabilities
13 published CVEs name Ericsson codechecker among the affected products.
- 13Published CVEs12 of them scored
- 7Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84161
Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics
Ericsson · CodeChecker
Medium4.9 - CVE-2026-84164
Stored XSS in the static HTML report export, because json.dumps does not escape the markup character
Ericsson · CodeChecker
None0.0 - CVE-2026-84155
Session Token Remains Valid After Logout in Multi-Worker Deployments
Ericsson · CodeChecker
Medium5.3 - CVE-2026-58107
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
Ericsson · CodeChecker
Medium5.5 - CVE-2026-58106
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
Ericsson · CodeChecker
Low2.0 - CVE-2026-58108
Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
Ericsson · CodeChecker
Low1.2 - CVE-2026-25660
Authentication bypass for certain API calls
Ericsson · CodeChecker
Critical9.3 - CVE-2025-40843
Buffer overflow in CodeChecker log command
Ericsson · CodeChecker
Medium5.9 - CVE-2025-1300
Open redirect in CodeChecker web server
Ericsson · CodeChecker
Medium6.1 - CVE-2024-53829
Cross-Site Request Forgery in CodeChecker API
Ericsson · CodeChecker
High8.2