PT-2026-53278 · Llvm · Llvm-Project

Tygls · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13573

NVD

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-13573

Affected Products

Llvm-Project

References · 8

• 🔥❌ https://github.com/user-attachments/files/28141697/poc.zip · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-13573 · Security Note
• https://github.com/llvm/llvm-project/issues/199187 · Note
• https://github.com/llvm/llvm-project · Note
• https://vuldb.com/cve/CVE-2026-13573 · Note
• https://vuldb.com/vuln/374581/cti · Note
• https://vuldb.com/submit/844457 · Note
• https://vuldb.com/vuln/374581 · Note