Segmentation Fault in MLIR Component of LLVM Project
CVE-2023-29932

5.5MEDIUM

Key Information:

Vendor

Llvm

Status
Llvm
Vendor
CVE Published:
5 May 2023

What is CVE-2023-29932?

A vulnerability in the MLIR component of the LLVM Project has been identified, stemming from a segmentation fault in the mlir::IROperandmlir::OpOperand. This flaw could potentially enable an attacker to exploit the issue, causing instability and unexpected behavior in applications relying on this component. Users are encouraged to update to the latest version to mitigate the risks associated with this vulnerability.

References

https://github.com/llvm/llvm-project/issues/58745

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.