Llvm

11 CVEs across 3 Llvm products. Browse Llvm vulnerabilities, severities, and proof-of-concept exploits.

Llvm products with known CVEs

ProductCVEs
Llvm8
Llvm-Project2
Clang1
Llvm CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-13574Low3.32026-06-29A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst…
CVE-2026-13573Low3.32026-06-29A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of t…
CVE-2023-29942Medium5.52023-05-05llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.
CVE-2023-29941Medium5.52023-05-05llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_t…
CVE-2023-29939Medium5.52023-05-05llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).
CVE-2023-29935Medium5.52023-05-05llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.
CVE-2023-29934Medium5.52023-05-05llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
CVE-2023-29933Medium5.52023-05-05llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
CVE-2023-29932Medium5.52023-05-05llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
CVE-2023-26924Medium5.52023-03-27LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language…
CVE-2014-28932014-04-23The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files v…