CVE-2026-13573

Name of the Vulnerable Software and Affected Versions llvm-project versions prior to 22.1.7

Description A stack-based buffer overflow occurs in the ValueSymbolTable Module within the library /lib/IR/ValueSymbolTable.cpp. The issue is triggered by the llvm::StringMap::insert() function. Successful exploitation requires local access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict local access to the system to prevent exploitation of the llvm::StringMap::insert() function.