CVE-2023-26924

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Debian logo
Debian Releases
Debian Product
Codename
llvm-toolchain-14
bookworm
unimportant
sid
unimportant
llvm-toolchain-15
bookworm
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
llvm
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
llvm-toolchain-10
kinetic
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
llvm-toolchain-11
kinetic
ignored
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
llvm-toolchain-12
kinetic
dne
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
llvm-toolchain-3.3
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
llvm-toolchain-3.4
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
llvm-toolchain-3.5
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
llvm-toolchain-3.6
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
not-affected
llvm-toolchain-3.7
kinetic
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
dne
llvm-toolchain-3.8
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
not-affected
llvm-toolchain-3.9
kinetic
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
not-affected
llvm-toolchain-4.0
kinetic
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
dne
llvm-toolchain-5.0
kinetic
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
dne
llvm-toolchain-6.0
kinetic
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
llvm-toolchain-7
kinetic
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
llvm-toolchain-8
kinetic
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
llvm-toolchain-9
kinetic
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
llvm-toolchain-snapshot
noble
dne
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
Common Weakness Enumeration
References
https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c
https://github.com/llvm/llvm-project/issues/60216
https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c
https://github.com/llvm/llvm-project/issues/60216
https://llvm.org/docs/Security.html#what-is-considered-a-security-issue