Denial of Service Vulnerability in CodeChecker by Ericsson

CVE-2026-58107

What is CVE-2026-58107?

An issue in CodeChecker's massStoreRun allows an authenticated user to submit overly compressed, Base64-encoded payloads that expand to a much larger size. This can lead to excessive memory usage and disk space consumption, as the entire decompressed output is created in memory before being saved to a temporary file. Consequently, a maliciously crafted payload could exhaust system resources, resulting in a denial of service and negatively impacting system availability.

References