CVE-2026-58106

Deferred Deferred - Pending Action

Stack Overflow in CodeChecker Due to unsafe_strcpy Usage

Publication date: 2026-08-28

Last updated on: 2026-09-01

Assigner: Ericsson

Description

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a 2-byte stack overflow on every invocation, independent of the input path's length. This issue affects CodeChecker: through 6.28.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-09-01

Generated

2026-09-18

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-58106

EUVD

EUVD-2026-67716

Affected Vendors & Products

Vendor	Product	Version / Range
codechecker	codechecker	to 6.28.2 (inc)
ericsson	codechecker	6.28.2
ericsson	codechecker	From 6.26.2 (inc) to 6.28.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow caused by incorrect buffer size handling in CodeChecker versions up to 6.28.2. The issue occurs when a safe_strcpy() function, which uses strncpy() internally, writes 4096 bytes into a buffer that only has 4094 bytes remaining. This happens because the function NUL-pads the destination to the full size passed, even though the actual available space is smaller.

Detection Guidance

This vulnerability is specific to CodeChecker versions through 6.28.2 and involves a stack overflow due to improper buffer handling in ldlogger-tool-gcc.c. Detection requires checking the installed CodeChecker version and examining the source code for the vulnerable pattern.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by triggering a stack overflow. Since it occurs on every invocation with a path argument, it may lead to crashes or potential code execution if exploited.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a technical buffer overflow issue in CodeChecker's build-logger component. However, if exploited, it could lead to system instability or crashes, potentially disrupting logging mechanisms that may be required for compliance audits under these regulations.

Mitigation Strategies

Upgrade CodeChecker to a version beyond 6.28.2 where the vulnerability has been fixed. If upgrading is not immediately possible, review and patch the ldlogger-tool-gcc.c file to replace the unsafe buffer handling with the safe_strcpy() helper as described in the advisory.

Hi! I’m here to help you understand CVE-2026-58106. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70