CVE-2023-39070
CVE-2023-39070 affects cppcheck (2.12 dev) with a local arbitrary-code execution via removeContradiction in token.cpp:1934, caused by a heap use-after-free. Several advisories confirm a fixed heap use-after-free and reference upgraded packages (e.g., openSUSE SUSE openSUSE-SU-2023:0413-1, patch t...