Advisories · Technology
Ericsson CodeChecker.
Every CVE that names Ericsson CodeChecker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics
- Ericsson CodeChecker
- Denial of service
- CWE-409
- CVSS 0.0 None
Stored XSS in the static HTML report export, because json.dumps does not escape the markup character
- Ericsson CodeChecker
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Session Token Remains Valid After Logout in Multi-Worker Deployments
- Ericsson CodeChecker
- Authentication bypass
- CVSS 5.5 Medium
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
- Ericsson CodeChecker
- Denial of service
- CWE-409
- CVSS 2.0 Low
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
- Ericsson CodeChecker
- Memory corruption
- CVSS 1.2 Low
Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
- Ericsson CodeChecker
- Broken access control