ByteOS Network

NVD Vulnerability Details :

CVE-2025-40843

Analyzed

Source-85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Published At-28 Oct, 2025 | 19:15

Updated At-14 Nov, 2025 | 18:52

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. This issue affects CodeChecker: through 6.26.1.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.9	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Ericsson

>>codechecker>>Versions before 6.26.2(exclusive)

cpe:2.3:a:ericsson:codechecker:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-121	Secondary	85b1779b-6ecd-4f52-bcc5-73eac4659dcf

CWE ID: CWE-121

Type: Secondary

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

References

Hyperlink	Source	Resource
https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r	85b1779b-6ecd-4f52-bcc5-73eac4659dcf	Exploit Vendor Advisory

Hyperlink: https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Resource:

Exploit

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History