← Πίσω στην αναζήτηση CVE

CVE-2026-13573

llvm

Περιγραφή

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 3.3EPSS 0.124%Κίνδυνος 0.33
Προβολή πηγής
Δημοσίευση
2026-06-29 15:16:38
Επηρεαζόμενες εκδόσεις
<=22.1.6
Τύπος
Βιβλιοθήκη
Διάνυσμα
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L