Every CVE Search/ Get API key

CVE-2026-13573

llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

4.8 MediumDisputed

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.17%Unchanged since Jun 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.8

llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
CVE-2026-13573
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
CVSS 2.0
1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR
Weakness
CWE-121, CWE-119
Updated
2026-11-02
EUVDEUVD-2026-40115 4.8

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
EUVD-2026-40115
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-p6v6-grg5-r9mw 1.9

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm:...

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
GHSA-p6v6-grg5-r9mw
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 1.9

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
CVE-2026-13573
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0
1.7 LowAV:L/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-119, CWE-121
Updated
2026-11-02
OSV 1.9

llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
CVE-2026-13573
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Weakness
CWE-119, CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2026-13573 1.9

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
DEBIAN-CVE-2026-13573
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:24069 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:24069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:7634 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7634
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-13573 1.9

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

Record
UBUNTU-CVE-2026-13573
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
llvm-toolchain-18
Debian:13
All versions, plus listed versions
1:18.1.8-181:18.1.8-20
None known
llvm-toolchain-19
Debian:12
All versions, plus listed versions
1:19.1.0-11:19.1.0-21:19.1.0-31:19.1.0-3.11:19.1.0-4
Show 45 moreShow less
1:19.1.0~++20240724103243+7af27be6633a-1~exp11:19.1.0~++rc2-1~exp11:19.1.0~++rc3-11:19.1.0~++rc3-1~exp11:19.1.0~++rc3-21:19.1.0~++rc4-11:19.1.0~++rc4-21:19.1.0~++rc4-31:19.1.0~++rc4-41:19.1.0~++rc4-51:19.1.1-11:19.1.1-1+powerpc1:19.1.2-11:19.1.2-1+hurd.11:19.1.2-1+hurd.21:19.1.2-1+powerpc1:19.1.2-1+powerpc.11:19.1.2-21:19.1.3-11:19.1.3-21:19.1.4-11:19.1.4-1~deb12u11:19.1.5-11:19.1.6-11:19.1.7-11:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-131:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-21:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-3~deb11u11:19.1.7-3~deb12u11:19.1.7-61:19.1.7-6+powerpc
None known
llvm-toolchain-19
Debian:13
All versions, plus listed versions
1:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-13
Show 16 moreShow less
1:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-61:19.1.7-6+powerpc1:19.1.7-71:19.1.7-7+hurd.11:19.1.7-81:19.1.7-9
None known
llvm-toolchain-21
Debian:14
All versions, plus listed versions
1:21.1.0-11:21.1.0~+rc2-1~exp11:21.1.1-11:21.1.2-11:21.1.2-2
Show 34 moreShow less
1:21.1.2-31:21.1.2-41:21.1.3-11:21.1.4-11:21.1.4-21:21.1.4-31:21.1.4-41:21.1.4-51:21.1.4-61:21.1.4-71:21.1.4-81:21.1.5-11:21.1.5-1+hurd.11:21.1.6-11:21.1.6-21:21.1.6-31:21.1.7-11:21.1.8-11:21.1.8-101:21.1.8-111:21.1.8-121:21.1.8-131:21.1.8-141:21.1.8-14~hurd.11:21.1.8-21:21.1.8-31:21.1.8-3~bpo13+11:21.1.8-3~bpo13+21:21.1.8-41:21.1.8-51:21.1.8-61:21.1.8-71:21.1.8-81:21.1.8-9
None known
llvm-toolchain-22
Debian:12
All versions, plus listed versions
1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1
Show 18 moreShow less
1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3
None known
llvm-toolchain-22
Debian:13
All versions, plus listed versions
1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1
Show 18 moreShow less
1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3
None known
llvm-toolchain-22
Debian:14
All versions, plus listed versions
1:22.1.0-11:22.1.0-21:22.1.0~+rc1-1~exp11:22.1.0~+rc2-1~exp11:22.1.0~+rc3-1~exp1
Show 18 moreShow less
1:22.1.1-11:22.1.2-11:22.1.3-11:22.1.4-11:22.1.5-11:22.1.6-11:22.1.7-11:22.1.7-1+hurd.11:22.1.8-11:22.1.8-1~deb11u11:22.1.8-1~deb12u11:22.1.8-1~deb13u11:22.1.8-1~deb13u21:22.1.8-1~deb13u31:22.1.8-1~deb13u41:22.1.8-1~deb13u51:22.1.8-21:22.1.8-3
None known
clang21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang21-analyzer
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang21-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
Show 81 moreShow less
Affected packages
PackageAffectedFixed
clang21-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang21-resource-filesystem
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang21-tools-extra
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang21-tools-extra-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
compiler-rt21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
git-clang-format21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
libomp21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
libomp21-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
lld21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
lld21-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
lld21-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
lldb21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
lldb21-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-cmake-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-doc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-filesystem
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-googletest
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
llvm21-test
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
python3-clang21
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-6.hum1
0:21.1.8-6.hum1
clang
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-analyzer
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-resource-filesystem
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-tools-extra
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
clang-tools-extra-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
compiler-rt
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
git-clang-format
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxx
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxx-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxx-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxxabi
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxxabi-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libcxxabi-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libomp
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
libomp-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
lld
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
lld-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
lld-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
lldb
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
lldb-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-bolt
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-cmake-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-doc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-filesystem
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-googletest
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-libunwind
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-libunwind-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-libunwind-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-test
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
mlir
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
mlir-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
mlir-static
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
polly
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
polly-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
python3-clang
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
python3-lit
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
python3-lldb
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
python3-mlir
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
before 0:21.1.8-1.1.hum1
0:21.1.8-1.1.hum1
llvm-toolchain-18
Ubuntu:20.04:LTS
All versions, plus listed versions
1:18.1.8-11~20.04.2
None known
llvm-toolchain-18
Ubuntu:24.04:LTS
All versions, plus listed versions
1:18.1.0~rc1-11:18.1.0~rc2-31:18.1.0~rc2-41:18.1.0~++20240126095841+0991d3c7b53d-1~exp11:18.1.2-1ubuntu21:18.1.2-1ubuntu31:18.1.3-11:18.1.3-1ubuntu1
None known
llvm-toolchain-19
Ubuntu:24.04:LTS
All versions, plus listed versions
1:19.1.1-1ubuntu1~24.04.2
None known
llvm-toolchain-18
Ubuntu:25.10
All versions, plus listed versions
1:18.1.8-171:18.1.8-181:18.1.8-18build11:18.1.8-18ubuntu11:18.1.8-18ubuntu2
None known
llvm-toolchain-19
Ubuntu:25.10
All versions, plus listed versions
1:19.1.7-3ubuntu11:19.1.7-3ubuntu21:19.1.7-5ubuntu11:19.1.7-5ubuntu21:19.1.7-6ubuntu3
None known
llvm-toolchain-21
Ubuntu:25.10
All versions, plus listed versions
1:21.1.0-11:21.1.2-2ubuntu6
None known
llvm-toolchain-18
Ubuntu:26.10
All versions, plus listed versions
1:18.1.8-20ubuntu81:18.1.8-20ubuntu11
None known
llvm-toolchain-19
Ubuntu:26.10
All versions, plus listed versions
1:19.1.7-20ubuntu41:19.1.7-20ubuntu8
None known
llvm-toolchain-21
Ubuntu:26.10
All versions, plus listed versions
1:21.1.8-6ubuntu11:21.1.8-10ubuntu2
None known
llvm-toolchain-22
Ubuntu:26.10
All versions, plus listed versions
1:22.1.2-1ubuntu11:22.1.6-1ubuntu11:22.1.6-1ubuntu41:22.1.8-1ubuntu1
None known
llvm-toolchain-18
Ubuntu:26.04:LTS
All versions, plus listed versions
1:18.1.8-18ubuntu21:18.1.8-20ubuntu21:18.1.8-20ubuntu41:18.1.8-20ubuntu51:18.1.8-20ubuntu8
None known
llvm-toolchain-19
Ubuntu:26.04:LTS
All versions, plus listed versions
1:19.1.7-6ubuntu31:19.1.7-7ubuntu11:19.1.7-10ubuntu11:19.1.7-16ubuntu11:19.1.7-19ubuntu21:19.1.7-20ubuntu11:19.1.7-20ubuntu4
None known
llvm-toolchain-21
Ubuntu:26.04:LTS
All versions, plus listed versions
1:21.1.2-2ubuntu61:21.1.6-3ubuntu11:21.1.7-1ubuntu21:21.1.8-1ubuntu11:21.1.8-3ubuntu11:21.1.8-4ubuntu21:21.1.8-6ubuntu1
None known
llvm-toolchain-22
Ubuntu:26.04:LTS
All versions, plus listed versions
1:22.1.0~+rc3-0ubuntu21:22.1.0-2ubuntu11:22.1.1-1ubuntu11:22.1.2-1ubuntu1
None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-13573 is a medium vulnerability (CVSS 4.8) in Llvm Llvm-project, published June 19, 2026. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile.

References

Show 35 moreShow less
This page doesn't list everything

Left out here: 4 versions. The JSON record has them.

MoveEnter Open