PT-2026-53278 · Llvm · Llvm-Project

Tygls · Publicado 2026-06-29 · Atualizado 2026-06-29 · CVE-2026-13573

NVD

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

CVE-2026-13573

Produtos afetados

Llvm-Project

Referências · 8

• 🔥❌ https://github.com/user-attachments/files/28141697/poc.zip · Exploit, Deleted
• https://github.com/llvm/llvm-project/issues/199187 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13573 · Nota de Segurança
• https://github.com/llvm/llvm-project · Nota
• https://vuldb.com/cve/CVE-2026-13573 · Nota
• https://vuldb.com/vuln/374581/cti · Nota
• https://vuldb.com/submit/844457 · Nota
• https://vuldb.com/vuln/374581 · Nota