Segmentation Fault in LLVM Project's SPIR-V Target Environment Component
CVE-2023-29939

5.5MEDIUM

Key Information:

Vendor

Llvm

Status
Llvm
Vendor
CVE Published:
5 May 2023

What is CVE-2023-29939?

A segmentation fault was identified in the LLVM project's SPIR-V target environment component. This flaw is associated with the mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr) method, which can lead to critical disruptions in functionality or potential exploitation if not addressed promptly. Developers and users of LLVM's compiler infrastructure should apply necessary patches and updates to mitigate this vulnerability.

References

https://github.com/llvm/llvm-project/issues/59983

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.