What’s Vulnerable › Vulnerabilities

CVE-2023-26924

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-27 · updated 2026-06-17
• Weakness: CWE-120

Description

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."

Affected products

• Llvm: 2023-01-22

References

• https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c
• https://github.com/llvm/llvm-project/issues/60216
• https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
• https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c
• https://github.com/llvm/llvm-project/issues/60216
• https://llvm.org/docs/Security.html#what-is-considered-a-security-issue

Get alerted when CVE-2023-26924 or the next vulnerability affects your stack