CVE-2023-26924

2023-03-2700:00:00

ubuntu.com

cve-2023-26924

llvm

segmentation fault

mlir::outlinesingleblockregion

disputed

third parties

security policy

undesirable behavior

github

rejected

upstream bug

not affected

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

DISPUTED LLVM a0dab4950 has a segmentation fault in
mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because
the LLVM security policy excludes “Language front-ends … for which a
malicious input file can cause undesirable behavior.”

Bugs

<https://github.com/llvm/llvm-project/issues/60216>

Notes

Author	Note
	Priority reason: This CVE was rejected
mdeslaur	This CVE will likely get rejected, see comment in upstream bug Marking as not-affected as the CVE was disputed