AZL-39758 CVE-2024-31852 affecting package llvm for versions less than 18.1.2-3

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

UBUNTU-CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

CVE-2024-31852

CVE-2024-31852 affects LLVM/Clang with an ARM backend miscompile: LLVM before 18.1.3 can overwrite LR register without saving to stack, enabling an exploitable flow-control issue in some cases. The vulnerability is demonstrated using Clang; vendor notes suggest the miscompile is likely to crash o...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...

LLVM 安全漏洞

LLVM is a toolkit for building highly optimized compilers, optimizers and runtime environments for LLVM. A security vulnerability exists in LLVM version 15.0.0 due to a NULL pointer dereference vulnerability found in the parseOneMetadata function...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...

CVE-2023-46049

CVE-2023-46049 describes a NULL pointer dereference in LLVM 15.0.0’s parseOneMetadata() when processing a crafted pdflatex.fmt (or possibly a crafted .o) fed to llvm-lto. The connected Nessus/OpenVAS advisories (TencentOS/Tencent Linux, EulerOS) explicitly cite this description block and note the...

PT-2024-13322 · Llvm · Llvm

Name of the Vulnerable Software and Affected Versions: LLVM version 15.0.0 Description: The issue is related to a NULL pointer dereference in the parseOneMetadata function. This can be triggered via a crafted pdflatex.fmt file or possibly a crafted .o file to llvm-lto. However, the relationship...

OSV-2024-140 Container-overflow in WasmEdge::LLVM::Compiler::compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67006 Crash type: Container-overflow READ 8 Crash state: WasmEdge::LLVM::Compiler::compile WasmEdge::LLVM::Compiler::compile WasmEdge::Driver::FuzzTool...

The vulnerability of the LLVM component of the macOS operating system, allowing a hacker to execute arbitrary code

The vulnerability of the LLVM component of the macOS operating system relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-40833 · Git +1 · Libavif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, as reported by OSS-Fuzz. The crash state involves LLVMFuzzerRunDriver. No information is provided...

PT-2024-1775 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.3 Description: The issue is related to a buffer overflow in the LLVM component of the macOS operating system, which can lead to arbitrary code execution when processing web content. This can be exploited by a remote...