CVE-2023-29942

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isamlir::LLVM::LLVMVoidType...

CVE-2023-29932

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...

CVE-2023-29659

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...

CVE-2023-29941

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

CVE-2023-29932

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...

CVE-2023-29941

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

CVE-2023-29934

llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect...

CVE-2023-29659

CVE-2023-29659 affects libheif 1.15.1 where a crafted HEIF image can trigger a segmentation fault via the heif::Fraction::round() path in box.cc, leading to denial of service. Connected advisories across major distros confirm this as a vulnerability in the library and reference various patches: D...

CVE-2023-29933

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...

CVE-2023-29932

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...

libheif 数字错误漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version 1.15.1, which stems from a segmentation error caused by a floating-point exception in the heif::Fraction::round function in box.cc, which can be exploited by an attacker to...

CVE-2023-29659

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...

LLVM project 缓冲区错误漏洞

LLVM project is a collection of modular, reusable compiler and toolchain technologies open-sourced by LLVM. A security vulnerability exists in LLVM project version a0138390, which stems from a segmentation error in the component mlir::Type::isamlir::LLVM::LLVMVoidType...

CVE-2023-29939

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...

CVE-2023-29939

CVE-2023-29939 corresponds to a segmentation fault in a0138390 of the LLVM project (mlir::spirv::TargetEnv). Publicly available sources (NVD entry and related advisories) describe memory/segfault issues originating from this commit in the LLVM Toolchain, with mention that affected artifacts inclu...

CVE-2023-29933

CVE-2023-29933 involves llvm-project; the commit bd456297 is reported to cause a segmentation fault in mlir::Block::getArgument. This affects LLVM Toolchain usage (notably the llvm-project/LLVM toolchain) and can lead to a crash (local impact on a vulnerable system). Remediation in publicly refer...

CVE-2023-29932

The CVE-2023-29932 issue stems from LLVM Toolchain (llvm-project commit fdbc55a5) containing a segmentation fault in mlir::IROperandmlir::OpOperand , enabling a local denial-of-service via a crash of vulnerable toolchain components. The advisory data indicates MEDIUM severity (CVSSv3.1: 5.5), loc...

CVE-2023-29939

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...

CVE-2023-29941

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

CVE-2023-29659

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...