{"id":"CVE-2025-40843","title":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy","summary":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\n\n\n\nCodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-121"],"vendor":"ericsson","product":"codechecker","affected":["codechecker < 6.26.2"],"patched":["codechecker 6.26.2"],"published":"2025-10-28","updated":"2026-10-08","sourceUpdated":"2026-10-08T11:10:00.250","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-40843","references":[{"url":"https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r","label":"85b1779b-6ecd-4f52-bcc5-73eac4659dcf"}],"tags":["nvd"],"epss":0.00191,"epssPercentile":0.07983,"ingestedAt":"2026-10-08T11:31:27.663Z","slug":"CVE-2025-40843","body":"## Overview\n\nCodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\n\n\n\nCodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.\n\n\n\n\n\nThis issue affects CodeChecker: through 6.26.1.\n\n## Affected\n\n- `codechecker < 6.26.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `codechecker 6.26.2`","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":32.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}