CVE-2024-31852

🗓️ 05 Apr 2024 00:00:00Reported by mitreType

LLVM 18.1.3 allows overwrite of LR register without data being saved to the stack, affecting ARM backend and Clang. Vendor perspective has low likelihood of exploit due to function crashing on most valid inputs.

Reporter	Title	Published	Views	Family All 36
Tenable Nessus	Azure Linux 3.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)	19 Aug 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-31852	7 Aug 202500:00	–	nessus
BDU FSTEC	The vulnerability of Clang’s tooling interface for developing, optimizing, and compiling software using the LLVM framework allows attackers to execute arbitrary code or cause service interruptions.	2 Jul 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-31852 affecting package lld for versions less than 18.1.2-2	10 Jul 202515:08	–	cbl_mariner
CBLMariner	CVE-2024-31852 affecting package lldb for versions less than 18.1.2-2	10 Jul 202515:08	–	cbl_mariner
CBLMariner	CVE-2024-31852 affecting package llvm for versions less than 18.1.2-3	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2024-31852 affecting package clang for versions less than 18.1.2-2	10 Jul 202515:08	–	cbl_mariner
CBLMariner	CVE-2024-31852 affecting package rust for versions less than 1.75.0-9	14 Aug 202420:43	–	cbl_mariner
CBLMariner	CVE-2024-31852 affecting package compiler-rt for versions less than 18.1.2-2	10 Jul 202515:08	–	cbl_mariner

Source	Link
bugs	www.bugs.chromium.org/p/llvm/issues/detail
github	www.github.com/llvm/llvm-project/issues/80287
llvm	www.llvm.org/docs/Security.html
github	www.github.com/llvmbot/llvm-project/commit/0e16af8e4cf3a66ad5d078d52744ae2776f9c4b2

05 Apr 2024 14:36Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.00991