CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

---

• llvm-toolchain-22 (unimportant)
• llvm-toolchain-21 (unimportant)
• llvm-toolchain-19 (unimportant)
• llvm-toolchain-18 (unimportant) https://github.com/llvm/llvm-project/issues/199187 Crash in CLI tool, no security impact