Joern 4.0.592

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.590

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

llvm:llvm-opt-fuzzer--x86_64-irce: Use-of-uninitialized-value in llvm::ScalarEvolution::createSCEV

Detailed Report: https://oss-fuzz.com/testcase?key=6058550435315712 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-irce Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvm::ScalarEvolution::createSCEV...

Joern 4.0.589

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: llvm21: clang21-21.1.8-8.hum1 aarch64, x8664 clang21-analyzer-21.1.8-8.hum1 aarch64, x8664 clang21-devel-21.1.8-8.hum1 aarch64, x8664 clang21-libs-21.1.8-8.hum1 aarch64, x8664...

Joern 4.0.583

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: llvm: clang-22.1.8-4.1.hum1 aarch64, x8664 clang-analyzer-22.1.8-4.1.hum1 aarch64, x8664 clang-devel-22.1.8-4.1.hum1 aarch64, x8664 clang-libs-22.1.8-4.1.hum1 aarch64, x8664...

Fedora 44 : llvm (2026-597e8f9de1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-597e8f9de1 advisory. Backport fixes from LLVM 23 - Fix an issue that could cause a buffer overflow when reading a corrupted bitcode file. - Fix a miscompilation known to affect...

Joern 4.0.582

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

llvm-ir-dataset-utils (0.2.0), ml-compiler-opt (>=0.0.1.dev202306210145, <=0.0.1.dev202401270006) +4 more potentially affected by CVE-2024-8375 via dm-reverb (>=0.7.0, <=0.14.0)

dm-reverb PYPI version =0.7.0, =0.0.1.dev202306210145, =0.0.1, =0.4.4, =3.0.1, =0.0.1, =0.0.2 Source cves: CVE-2024-8375 Source advisory: OSV:PYSEC-2026-2452...

llvm:llvm-opt-fuzzer--x86_64-dse: New-delete-type-mismatch in std::__1::vector<std::__1::unique_ptr<llvm::detail::PassConcept<llvm::Function,

Detailed Report: https://oss-fuzz.com/testcase?key=5365654174367744 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-opt-fuzzer--x8664-dse Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: New-delete-type-mismatch Crash Address: 0x7c7ff70f0c40 Crash State:...

Joern 4.0.578

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.575

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.573

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

SUSE CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

SUSE CVE-2026-13574

A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on th...

Joern 4.0.570

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Linux Distros Unpatched Vulnerability : CVE-2026-13573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of th...

Linux Distros Unpatched Vulnerability : CVE-2026-13574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library...

CVE-2026-13574

A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on th...