CVE-2026-58106
Received Received - Intake

Stack Overflow in CodeChecker Due to unsafe_strcpy Usage

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: Ericsson

Description
CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a 2-byte stack overflow on every invocation, independent of the input path's length. This issue affects CodeChecker: through 6.28.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-29
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-58106
EUVD
EUVD-2026-67716

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
codechecker codechecker to 6.28.2 (inc)
ericsson codechecker 6.28.2
ericsson codechecker From 6.26.2 (inc) to 6.28.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack overflow caused by incorrect buffer size handling in CodeChecker versions up to 6.28.2. The issue occurs when a safe_strcpy() function, which uses strncpy() internally, writes 4096 bytes into a buffer that only has 4094 bytes remaining. This happens because the function NUL-pads the destination to the full size passed, even though the actual available space is smaller.

Detection Guidance

This vulnerability is specific to CodeChecker versions through 6.28.2 and involves a stack overflow due to improper buffer handling in ldlogger-tool-gcc.c. Detection requires checking the installed CodeChecker version and examining the source code for the vulnerable pattern.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by triggering a stack overflow. Since it occurs on every invocation with a path argument, it may lead to crashes or potential code execution if exploited.

Mitigation Strategies

Upgrade CodeChecker to a version beyond 6.28.2 where the vulnerability has been fixed. If upgrading is not immediately possible, review and patch the ldlogger-tool-gcc.c file to replace the unsafe buffer handling with the safe_strcpy() helper as described in the advisory.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58106. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart