https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:52:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-361380 EUVD-2026-361380 https://cve.radiocsirt.org/vuln/euvd-2026-361380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58106 <p>CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a 2-byte stack overflow on every invocation, independent of the input path&#39;s length.</p> <p>This issue affects CodeChecker: through 6.28.2.</p> <p>CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATH_MAX. safe_strcpy() is strncpy(), which NUL-pads the destination out to the whole n, so this site writes 4096 bytes into the 4094 that remain — a 2-byte stack overflow on every invocation, independent of the input path&#39;s length.</p> <p>This issue affects CodeChecker: through 6.28.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58106