Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-06-29T14:15:09 llvm: llvm-project: LLVM: Denial of service via heap-based buffer overflow in Bitcode File Handler 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CWE-805

A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. There are still doubts about whether this vulnerability truly exists. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.

A flaw was found in llvm. A local attacker could exploit a heap-based buffer overflow vulnerability in the GCRelocateInst::getBasePtr function within the Bitcode File Handler component. This flaw could lead to a denial of service, making the affected system unavailable.

This vulnerability has a Low impact, as it requires a local attacker to exploit a heap-based buffer overflow in the LLVM Bitcode File Handler. Successful exploitation could lead to a denial of service by making the affected system unavailable. Red Hat Hardened Images 2026-06-07T00:00:00Z RHSA-2026:24069 llvm21-main-21.1.8-6.hum1 Red Hat Hardened Images 2026-04-11T00:00:00Z RHSA-2026:7634 llvm-main-21.1.8-1.1.hum1 Red Hat AI Inference Server Not affected rhaii/model-opt-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/model-opt-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-cuda-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-rocm-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Not affected rhaiis/vllm-tpu-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-cpu-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-cuda-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-neuron-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-rocm-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-spyre-rhel9 Red Hat AI Inference Server Not affected rhaii/vllm-tpu-rhel9 Red Hat Enterprise Linux 10 Fix deferred llvm Red Hat Enterprise Linux 8 Fix deferred llvm Red Hat Enterprise Linux 9 Fix deferred llvm Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected llvm14 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected llvm15 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected llvm20 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected llvm21 Red Hat Hardened Images Affected rust Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-cpu-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-cuda-12.9-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-cuda-13.0-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-neuron-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-rocm-6.4-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-rocm-7.0-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-rocm-7.1-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-spyre-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhai/base-image-tpu-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-automl-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-feature-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-kserve-autogluon-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llm-d-inference-scheduler-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-llm-d-kv-cache-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-ml-pipelines-api-server-v2-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-ml-pipelines-runtime-generic-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-mlserver-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-model-registry-job-async-upload-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-pipelines-components-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-spark-operator-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-nemo-guardrails-server-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-vllm-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred rhcos https://www.cve.org/CVERecord?id=CVE-2026-13574 https://nvd.nist.gov/vuln/detail/CVE-2026-13574 https://github.com/llvm/llvm-project/ https://github.com/llvm/llvm-project/issues/199191 https://github.com/user-attachments/files/28142619/poc.zip https://vuldb.com/cve/CVE-2026-13574 https://vuldb.com/submit/844468 https://vuldb.com/vuln/374582 https://vuldb.com/vuln/374582/cti