CVE-2026-13573
llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
4.8
llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
CVE-2026-13573- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R - CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R - CVSS 2.0
- 1.7
AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR - Weakness
- CWE-121, CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2026-40115
4.8
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
EUVD-2026-40115- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p6v6-grg5-r9mw
1.9
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm:...
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
GHSA-p6v6-grg5-r9mw- CVSS 4.0
- 1.9 Low
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
1.9
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
CVE-2026-13573- CVSS 4.0
- 1.9 Low
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 1.7 Low
AV:L/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-119, CWE-121
- Updated
- 2026-11-02
OSV
1.9
llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
CVE-2026-13573- CVSS 4.0
- 1.9 Low
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - Weakness
- CWE-119, CWE-121
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-13573
1.9
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
DEBIAN-CVE-2026-13573- CVSS 4.0
- 1.9 Low
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVRHSA-2026:24069
7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:24069- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:7634
7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7634- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-13573
1.9
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
- Record
UBUNTU-CVE-2026-13573- CVSS 4.0
- 1.9 Low
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
llvm-toolchain-18Debian:13 |
All versions, plus listed versions 1:18.1.8-181:18.1.8-20 |
None known |
llvm-toolchain-19Debian:12 |
All versions, plus listed versions 1:19.1.0-11:19.1.0-21:19.1.0-31:19.1.0-3.11:19.1.0-4 Show 45 moreShow less1:19.1.0~++20240724103243+7af27be6633a-1~exp11:19.1.0~++rc2-1~exp11:19.1.0~++rc3-11:19.1.0~++rc3-1~exp11:19.1.0~++rc3-21:19.1.0~++rc4-11:19.1.0~++rc4-21:19.1.0~++rc4-31:19.1.0~++rc4-41:19.1.0~++rc4-51:19.1.1-11:19.1.1-1+powerpc1:19.1.2-11:19.1.2-1+hurd.11:19.1.2-1+hurd.21:19.1.2-1+powerpc1:19.1.2-1+powerpc.11:19.1.2-21:19.1.3-11:19.1.3-21:19.1.4-11:19.1.4-1~deb12u11:19.1.5-11:19.1.6-11:19.1.7-11:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-131:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-21:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-3~deb11u11:19.1.7-3~deb12u11:19.1.7-61:19.1.7-6+powerpc |
None known |
llvm-toolchain-19Debian:13 |
All versions, plus listed versions 1:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-13 Show 16 moreShow less1:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-61:19.1.7-6+powerpc1:19.1.7-71:19.1.7-7+hurd.11:19.1.7-81:19.1.7-9 |
None known |
llvm-toolchain-21Debian:14 |
All versions, plus listed versions 1:21.1.0-11:21.1.0~+rc2-1~exp11:21.1.1-11:21.1.2-11:21.1.2-2 Show 34 moreShow less1:21.1.2-31:21.1.2-41:21.1.3-11:21.1.4-11:21.1.4-21:21.1.4-31:21.1.4-41:21.1.4-51:21.1.4-61:21.1.4-71:21.1.4-81:21.1.5-11:21.1.5-1+hurd.11:21.1.6-11:21.1.6-21:21.1.6-31:21.1.7-11:21.1.8-11:21.1.8-101:21.1.8-111:21.1.8-121:21.1.8-131:21.1.8-141:21.1.8-14~hurd.11:21.1.8-21:21.1.8-31:21.1.8-3~bpo13+11:21.1.8-3~bpo13+21:21.1.8-41:21.1.8-51:21.1.8-61:21.1.8-71:21.1.8-81:21.1.8-9 |
None known |
llvm-toolchain-22Debian:12 |
All versions, plus listed versions 1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1 Show 18 moreShow less1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3 |
None known |
llvm-toolchain-22Debian:13 |
All versions, plus listed versions 1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1 Show 18 moreShow less1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3 |
None known |
llvm-toolchain-22Debian:14 |
All versions, plus listed versions 1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1 Show 18 moreShow less1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3 |
None known |
clang21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clang21-analyzerRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clang21-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
Show 81 moreShow less
| Package | Affected | Fixed |
|---|---|---|
clang21-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clang21-resource-filesystemRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clang21-tools-extraRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clang21-tools-extra-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
compiler-rt21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
git-clang-format21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
libomp21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
libomp21-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
lld21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
lld21-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
lld21-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
lldb21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
lldb21-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-cmake-utilsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-docRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-filesystemRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-googletestRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
llvm21-testRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
python3-clang21Red Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-6.hum1 | 0:21.1.8-6.hum1 |
clangRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-analyzerRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-resource-filesystemRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-tools-extraRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
clang-tools-extra-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
compiler-rtRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
git-clang-formatRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxxRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxx-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxx-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxxabiRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxxabi-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libcxxabi-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libompRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
libomp-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
lldRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
lld-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
lld-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
lldbRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
lldb-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvmRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-boltRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-cmake-utilsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-docRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-filesystemRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-googletestRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-libsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-libunwindRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-libunwind-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-libunwind-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-testRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
mlirRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
mlir-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
mlir-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
pollyRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
polly-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
python3-clangRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
python3-litRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
python3-lldbRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
python3-mlirRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:21.1.8-1.1.hum1 | 0:21.1.8-1.1.hum1 |
llvm-toolchain-18Ubuntu:20.04:LTS |
All versions, plus listed versions 1:18.1.8-11~20.04.2 |
None known |
llvm-toolchain-18Ubuntu:24.04:LTS |
All versions, plus listed versions 1:18.1.0~rc1-11:18.1.0~rc2-31:18.1.0~rc2-41:18.1.0~++20240126095841+0991d3c7b53d-1~exp11:18.1.2-1ubuntu21:18.1.2-1ubuntu31:18.1.3-11:18.1.3-1ubuntu1 |
None known |
llvm-toolchain-19Ubuntu:24.04:LTS |
All versions, plus listed versions 1:19.1.1-1ubuntu1~24.04.2 |
None known |
llvm-toolchain-18Ubuntu:25.10 |
All versions, plus listed versions 1:18.1.8-171:18.1.8-181:18.1.8-18build11:18.1.8-18ubuntu11:18.1.8-18ubuntu2 |
None known |
llvm-toolchain-19Ubuntu:25.10 |
All versions, plus listed versions 1:19.1.7-3ubuntu11:19.1.7-3ubuntu21:19.1.7-5ubuntu11:19.1.7-5ubuntu21:19.1.7-6ubuntu3 |
None known |
llvm-toolchain-21Ubuntu:25.10 |
All versions, plus listed versions 1:21.1.0-11:21.1.2-2ubuntu6 |
None known |
llvm-toolchain-18Ubuntu:26.10 |
All versions, plus listed versions 1:18.1.8-20ubuntu81:18.1.8-20ubuntu11 |
None known |
llvm-toolchain-19Ubuntu:26.10 |
All versions, plus listed versions 1:19.1.7-20ubuntu41:19.1.7-20ubuntu8 |
None known |
llvm-toolchain-21Ubuntu:26.10 |
All versions, plus listed versions 1:21.1.8-6ubuntu11:21.1.8-10ubuntu2 |
None known |
llvm-toolchain-22Ubuntu:26.10 |
All versions, plus listed versions 1:22.1.2-1ubuntu11:22.1.6-1ubuntu11:22.1.6-1ubuntu41:22.1.8-1ubuntu1 |
None known |
llvm-toolchain-18Ubuntu:26.04:LTS |
All versions, plus listed versions 1:18.1.8-18ubuntu21:18.1.8-20ubuntu21:18.1.8-20ubuntu41:18.1.8-20ubuntu51:18.1.8-20ubuntu8 |
None known |
llvm-toolchain-19Ubuntu:26.04:LTS |
All versions, plus listed versions 1:19.1.7-6ubuntu31:19.1.7-7ubuntu11:19.1.7-10ubuntu11:19.1.7-16ubuntu11:19.1.7-19ubuntu21:19.1.7-20ubuntu11:19.1.7-20ubuntu4 |
None known |
llvm-toolchain-21Ubuntu:26.04:LTS |
All versions, plus listed versions 1:21.1.2-2ubuntu61:21.1.6-3ubuntu11:21.1.7-1ubuntu21:21.1.8-1ubuntu11:21.1.8-3ubuntu11:21.1.8-4ubuntu21:21.1.8-6ubuntu1 |
None known |
llvm-toolchain-22Ubuntu:26.04:LTS |
All versions, plus listed versions 1:22.1.0~+rc3-0ubuntu21:22.1.0-2ubuntu11:22.1.1-1ubuntu11:22.1.2-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-13573 is a medium vulnerability (CVSS 4.8) in Llvm Llvm-project, published June 19, 2026. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile.
References
vuldb.com/vuln/374581
vuldb.com/vuln/374581/cti
vuldb.com/cve/CVE-2026-13573
vuldb.com/submit/844457
github.com/llvm/llvm-project/issues/199187
github.com/user-attachments/files/28141697/poc.zip
Show 35 moreShow less
github.com/llvm/llvm-project
nvd.nist.gov/vuln/detail/CVE-2026-13573
github.com/advisories/GHSA-p6v6-grg5-r9mw
github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13573.json
security-tracker.debian.org/tracker/CVE-2026-13573
access.redhat.com/errata/RHSA-2026:24069
images.redhat.com
access.redhat.com/security/cve/CVE-2026-45149
access.redhat.com/security/updates/classification
access.redhat.com/security/cve/CVE-2026-44432
access.redhat.com/security/cve/CVE-2026-13573
access.redhat.com/security/cve/CVE-2026-13574
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24069.json
bugzilla.redhat.com/show_bug.cgi?id=2494424
cve.org/CVERecord?id=CVE-2026-13573
bugzilla.redhat.com/show_bug.cgi?id=2494420
cve.org/CVERecord?id=CVE-2026-13574
nvd.nist.gov/vuln/detail/CVE-2026-13574
github.com/llvm/llvm-project/issues/199191
github.com/user-attachments/files/28142619/poc.zip
vuldb.com/cve/CVE-2026-13574
vuldb.com/submit/844468
vuldb.com/vuln/374582
vuldb.com/vuln/374582/cti
bugzilla.redhat.com/show_bug.cgi?id=2477154
cve.org/CVERecord?id=CVE-2026-44432
nvd.nist.gov/vuln/detail/CVE-2026-44432
github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j
bugzilla.redhat.com/show_bug.cgi?id=2483481
cve.org/CVERecord?id=CVE-2026-45149
nvd.nist.gov/vuln/detail/CVE-2026-45149
github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2
access.redhat.com/errata/RHSA-2026:7634
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7634.json
ubuntu.com/security/CVE-2026-13573
Left out here: 4 versions. The JSON record has them.