ECHO-915C-A579-C425 Reported (VulDB) heap-based buffer overflow in GCRelocateInst::getBasePtr in llvm/lib/IR/IntrinsicInst.cpp (Bitcode File Handler), reachable only by locally feeding a crafted bitcode file to LLVM tooling. NVD carries the "disputed" tag and notes "There are still doubts about whether this vulnerability truly exists". The LLVM project explains that the reported behavior is outside its documented security scope and is therefore not considered a security vulnerability. Reported against llvm-project 22.1.x; the shipped toolchain is 19.1.7. Debian classifies it as an unimportant issue. No code change required. https://security-tracker.debian.org/tracker/CVE-2026-13574
| Reporter | Title | Published | Views | Family All 26 |
|---|---|---|---|---|
 | Security Bulletin:Vulnerability in llvm-filesystem affects IBM Netezza Appliance | 12 Aug 202609:05 | – | ibm |
 | CVE-2026-13574 | 29 Jun 202614:15 | – | attackerkb |
 | CVE-2026-13574 | 29 Jun 202620:15 | – | circl |
 | CVE-2026-13574 | 29 Jun 202614:15 | – | cve |
 | CVE-2026-13574 llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow | 29 Jun 202614:15 | – | cvelist |
 | CVE-2026-13574 | 29 Jun 202614:15 | – | debiancve |
 | EUVD-2026-40118 | 29 Jun 202614:15 | – | euvd |
 | [SECURITY] Fedora 44 Update: llvm-22.1.8-4.fc44 | 23 Jul 202601:21 | – | fedora |
 | Fedora 44 : llvm (2026-597e8f9de1) | 23 Jul 202600:00 | – | nessus |
| Fedora 45 : python-llvmlite (2026-ebbaee3606) | 6 Jul 202600:00 | – | nessus |
10
| Source | Link |
|---|---|
| advisory | www.advisory.echohq.com/cve/CVE-2026-13574 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Jul 2026 16:30Current
6.1Medium risk
Vulners AI Score6.1
CVSS 21.7
CVSS 3.13.3
CVSS 44.8
CVSS 33.3
EPSS0.00173
SSVC