CVE catalog

CVE-2023-29933

llvm-toolchain-13: CVE-2023-29933

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.22% · Oct 25, 2026

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianllvm-toolchain-13bookworm1:13.0.1-11vulnerable
Debianllvm-toolchain-14bookworm1:14.0.6-12vulnerable
Debianllvm-toolchain-15bookworm1:15.0.6-4vulnerable
Ubuntullvm-toolchain-1522.041:15.0.6-3~ubuntu0.22.04.2vulnerable
Ubuntullvm-toolchain-1522.041:15.0.7-0ubuntu0.22.04.1vulnerable
Ubuntullvm-toolchain-1522.041:15.0.7-0ubuntu0.22.04.2vulnerable
Ubuntullvm-toolchain-1522.041:15.0.7-0ubuntu0.22.04.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianllvm-toolchain-13sourcebookworm(unfixed)unimportantNot reportedNot reported
Debianllvm-toolchain-14sourcebookworm(unfixed)unimportantNot reportedNot reported
Debianllvm-toolchain-15sourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntullvm-toolchain-15deb22.041:15.0.7-0ubuntu0.22.04.3Not reportedUBUNTU-CVE-2023-29933Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]