CVE-2026-13573
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A stack-based buffer overflow vulnerability exists in the LLVM library in the llvm::StringMap::insert function within ValueSymbolTable.cpp. The issue affects versions up to 22.1.6 and requires local access to exploit.
Risk Assessment
A local attacker could exploit this buffer overflow to cause system crashes or potentially escalate privileges. The risk is limited due to the required local access and the vendor's stance that this is not a security vulnerability.
Recommendation
Monitor LLVM project updates and consider temporary mitigations such as restricting local system access. If no official patch is provided, assess the risk and possibly block unauthorized local access.
Original NVD description (English source)
A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.