Skip to content
OpenAdvisories

Package · Debian

llvm-toolchain-18

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Low 3.3

    llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow

    A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It …

  • Low 3.3

    llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

    A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attac…

  • Low 3.7

    CMSE secure state may leak from stack to floating-point registers

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of fl…