CVE-2026-13573
llvm: llvm: Denial of Service via stack-based buffer overflow in StringMap::insert
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 29, 2026
Updated · November 1, 2026
Description
A flaw was found in llvm. A local attacker could exploit a stack-based buffer overflow vulnerability in the llvm::StringMap::insert function. This manipulation could lead to a denial of service, making the affected system or application unavailable.
Statement
This flaw has a Low impact as it requires a local attacker to exploit a stack-based buffer overflow in the llvm::StringMap::insert function. Successful exploitation could lead to a denial of service, affecting the availability of systems utilizing the vulnerable LLVM component. The vulnerability is limited to local access, reducing its overall risk in typical Red Hat deployments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')