CVE-2023-26924

Published: Mar 27, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."

Affected (1)

Products: Llvm: Llvm

Llvm

1 product

Llvm

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Llvm Llvm	Version 2023-01-22

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (6)

https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c

Source: cve@mitre.org

Third Party Advisory

https://github.com/llvm/llvm-project/issues/60216

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://llvm.org/docs/Security.html#what-is-considered-a-security-issue

Source: cve@mitre.org

https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/llvm/llvm-project/issues/60216

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://llvm.org/docs/Security.html#what-is-considered-a-security-issue

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.