Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube Thi...

AZL-26404 CVE-2023-29941 affecting package clang16 for versions less than 16.0.0-2

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

AZL-26687 CVE-2023-29935 affecting package clang16 for versions less than 16.0.0-2

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...

AZL-26392 CVE-2023-29933 affecting package clang16 for versions less than 16.0.0-2

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...

AZL-26688 CVE-2023-29942 affecting package clang16 for versions less than 16.0.0-2

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isamlir::LLVM::LLVMVoidType...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube Thi...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a...

SUSE CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names...

SUSE CVE-2016-6878

The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined behavior, as demonstrated on 32-bit ARM systems compiled by Clang...

SUSE CVE-2017-2870

An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability...

SUSE CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

clang bug fix and enhancement update

An update is available for clang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The clang package provides a C language family front-end for LLVM. clang-14.0.6...

GSD-2023-1000070 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame

drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33244 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...

PT-2023-33147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...

PT-2023-33315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...

GSD-2022-1007247 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007042 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit 066b1302f2a9f07d268da73ef5557b886d4dee2...

GSD-2022-1006776 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 5ef8f5b73cd1096b12b541281733f0db14b73c89...

PT-2022-35297 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a bug in Clang bdos that has been worked around. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...