{"id":"UBUNTU-CVE-2026-13573","details":"A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.","modified":"2026-07-09T17:15:09.627859362Z","published":"2026-06-29T15:16:00Z","upstream":["CVE-2026-13573"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-13573"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-13573"},{"type":"REPORT","url":"https://github.com/llvm/llvm-project/"},{"type":"REPORT","url":"https://github.com/user-attachments/files/28141697/poc.zip"},{"type":"REPORT","url":"https://vuldb.com/cve/CVE-2026-13573"},{"type":"REPORT","url":"https://vuldb.com/submit/844457"},{"type":"REPORT","url":"https://vuldb.com/vuln/374581"},{"type":"REPORT","url":"https://vuldb.com/vuln/374581/cti"}],"affected":[{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-11~20.04.2"],"ecosystem_specific":{"binaries":[{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"bolt-18"},{"binary_name":"clang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"clang-18-examples"},{"binary_name":"clang-format-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"clang-tools-18"},{"binary_name":"clangd-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"flang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++1-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++abi-18-dev-wasm32","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++abi1-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libclang-cpp18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libclang-rt-18-dev-wasm32"},{"binary_name":"libclang-rt-18-dev-wasm64","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libclang1-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libclc-18"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"liblld-18"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libllvm18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libmlir-18"},{"binary_name":"libomp5-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libunwind-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"lld-18"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"llvm-18"},{"binary_name":"llvm-18-examples","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"llvm-18-linker-tools"},{"binary_name":"llvm-18-runtime","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"llvm-18-tools","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"mlir-18-tools","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"python3-lldb-18"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.0~rc1-1","1:18.1.0~rc2-3","1:18.1.0~rc2-4","1:18.1.0~++20240126095841+0991d3c7b53d-1~exp1","1:18.1.2-1ubuntu2","1:18.1.2-1ubuntu3","1:18.1.3-1","1:18.1.3-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"clang-18"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"clang-format-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"clang-tools-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"clangd-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"flang-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libc++-18-dev-wasm32"},{"binary_name":"libc++1-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libc++abi-18-dev-wasm32"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libc++abi1-18"},{"binary_name":"libclang-cpp18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libclang-rt-18-dev-wasm64","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libclang1-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libclc-18"},{"binary_name":"liblld-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"liblldb-18"},{"binary_name":"libllvm18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libmlir-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libomp5-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libunwind-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"lld-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"lldb-18"},{"binary_name":"llvm-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"llvm-18-examples","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"llvm-18-linker-tools"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"llvm-18-runtime"},{"binary_name":"llvm-18-tools","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"mlir-18-tools"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"python3-lldb-18","binary_version":"1:18.1.3-1ubuntu1"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.1-1ubuntu1~24.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"clang-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"clang-19-examples"},{"binary_name":"clang-format-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"clang-tidy-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"clang-tools-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"clangd-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"flang-19"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libc++-19-dev-wasm32"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libc++1-19"},{"binary_name":"libc++abi-19-dev-wasm32","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libc++abi1-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libclang-cpp19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libclang-rt-19-dev-wasm32"},{"binary_name":"libclang-rt-19-dev-wasm64","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libclang1-19"},{"binary_name":"libclc-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"liblld-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"liblldb-19"},{"binary_name":"libllvm19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libmlir-19"},{"binary_name":"libomp5-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libunwind-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"lld-19"},{"binary_name":"lldb-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"llvm-19"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"llvm-19-examples"},{"binary_name":"llvm-19-linker-tools","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-tools","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"mlir-19-tools","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"python3-clang-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"python3-lldb-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-17","1:18.1.8-18","1:18.1.8-18build1","1:18.1.8-18ubuntu1","1:18.1.8-18ubuntu2"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-format-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"clang-tools-18"},{"binary_name":"clangd-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"flang-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libc++1-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libc++abi-18-dev-wasm32","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libc++abi1-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libclang-cpp18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libclang-rt-18-dev-wasm32"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libclang-rt-18-dev-wasm64"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libclang1-18"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libclc-18"},{"binary_name":"liblld-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libllvm18"},{"binary_name":"libmlir-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libomp5-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libunwind-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"lld-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18-examples"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18-linker-tools"},{"binary_name":"llvm-18-runtime","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18-tools"},{"binary_name":"mlir-18-tools","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"python3-lldb-18"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.7-3ubuntu1","1:19.1.7-3ubuntu2","1:19.1.7-5ubuntu1","1:19.1.7-5ubuntu2","1:19.1.7-6ubuntu3"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_name":"bolt-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"clang-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"clang-19-examples","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-format-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-tidy-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-tools-19"},{"binary_name":"clangd-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"flang-19"},{"binary_name":"libc++-19-dev-wasm32","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libc++1-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libc++abi-19-dev-wasm32"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libc++abi1-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libclang-cpp19"},{"binary_name":"libclang-rt-19-dev-wasm32","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libclang-rt-19-dev-wasm64","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libclang1-19"},{"binary_name":"libclc-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"liblld-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"liblldb-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libllvm19"},{"binary_name":"libmlir-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libomp5-19"},{"binary_name":"libunwind-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"lld-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"lldb-19"},{"binary_name":"llvm-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"llvm-19-examples"},{"binary_name":"llvm-19-linker-tools","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"llvm-19-tools"},{"binary_name":"mlir-19-tools","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"python3-clang-19"},{"binary_name":"python3-lldb-19","binary_version":"1:19.1.7-6ubuntu3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-21","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-21?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:21.1.0-1","1:21.1.2-2ubuntu6"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"bolt-21"},{"binary_name":"clang-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"clang-21-examples"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"clang-format-21"},{"binary_name":"clang-tidy-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"clang-tools-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"clangd-21"},{"binary_name":"flang-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"libc++-21-dev-wasm32"},{"binary_name":"libc++1-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libc++abi-21-dev-wasm32","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libc++abi1-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libclang-cpp21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libclang-rt-21-dev-wasm32","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libclang-rt-21-dev-wasm64","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libclang1-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"libclc-21"},{"binary_name":"liblld-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"liblldb-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libllvm21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libmlir-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"liboffload-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libomp5-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libunwind-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"lld-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"lldb-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"llvm-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"llvm-21-examples"},{"binary_name":"llvm-21-linker-tools","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"llvm-21-runtime","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"llvm-21-tools","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"mlir-21-tools"},{"binary_name":"python3-clang-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"python3-lldb-21"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-18ubuntu2","1:18.1.8-20ubuntu2","1:18.1.8-20ubuntu4","1:18.1.8-20ubuntu5","1:18.1.8-20ubuntu8"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-format-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-tools-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clangd-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"flang-18"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libc++1-18"},{"binary_name":"libc++abi-18-dev-wasm32","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libc++abi1-18"},{"binary_name":"libclang-cpp18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libclang-rt-18-dev-wasm64"},{"binary_name":"libclang1-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libclc-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"liblld-18"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libllvm18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libmlir-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libomp5-18"},{"binary_name":"libunwind-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"lld-18"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"llvm-18-examples"},{"binary_name":"llvm-18-linker-tools","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18-runtime","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18-tools","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"mlir-18-tools"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"python3-lldb-18","binary_version":"1:18.1.8-20ubuntu8"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.7-6ubuntu3","1:19.1.7-7ubuntu1","1:19.1.7-10ubuntu1","1:19.1.7-16ubuntu1","1:19.1.7-19ubuntu2","1:19.1.7-20ubuntu1","1:19.1.7-20ubuntu4"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"clang-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clang-19-examples"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clang-format-19"},{"binary_name":"clang-tidy-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clang-tools-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clangd-19"},{"binary_name":"flang-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libc++-19-dev-wasm32","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libc++abi-19-dev-wasm32","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libclang-cpp19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libclang-rt-19-dev-wasm32"},{"binary_name":"libclang-rt-19-dev-wasm64","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libclang-rt-19-dev-win"},{"binary_name":"libclang1-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libclc-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"liblld-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"liblldb-19"},{"binary_name":"libllvm19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libmlir-19"},{"binary_name":"liboffload-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"lld-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"lldb-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19-examples","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19-linker-tools","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"llvm-19-tools"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"mlir-19-tools"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"python3-clang-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"python3-lldb-19"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-21","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-21?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:21.1.2-2ubuntu6","1:21.1.6-3ubuntu1","1:21.1.7-1ubuntu2","1:21.1.8-1ubuntu1","1:21.1.8-3ubuntu1","1:21.1.8-4ubuntu2","1:21.1.8-6ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-21-examples","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"clang-format-21"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"clang-tidy-21"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"clang-tools-21"},{"binary_name":"clangd-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"flang-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libc++-21-dev-wasm32"},{"binary_name":"libc++abi-21-dev-wasm32","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libclang-cpp21"},{"binary_name":"libclang-rt-21-dev-wasm32","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"libclang-rt-21-dev-wasm64","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libclang-rt-21-dev-win"},{"binary_name":"libclang1-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"libclc-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"liblld-21"},{"binary_name":"liblldb-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libllvm21"},{"binary_name":"libmlir-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"liboffload-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"lld-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"lldb-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21-examples","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21-linker-tools","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21-runtime","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"llvm-21-tools"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"mlir-21-tools"},{"binary_name":"python3-clang-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"python3-lldb-21"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}},{"package":{"name":"llvm-toolchain-22","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-22?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:22.1.0~+rc3-0ubuntu2","1:22.1.0-2ubuntu1","1:22.1.1-1ubuntu1","1:22.1.2-1ubuntu1"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"bolt-22"},{"binary_name":"clang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"clang-22-examples"},{"binary_name":"clang-format-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"clang-tidy-22"},{"binary_name":"clang-tools-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"clangd-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"flang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libc++-22-dev-wasm32"},{"binary_name":"libc++1","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libc++abi-22-dev-wasm32"},{"binary_name":"libc++abi1","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-cpp22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-rt-22-dev-wasm32","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-rt-22-dev-wasm64","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-rt-22-dev-win","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang1-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libclc-22"},{"binary_name":"liblld-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"liblldb-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libllvm22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libmlir-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"liboffload-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libomp5","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"lld-22"},{"binary_name":"lldb-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"llvm-22-examples"},{"binary_name":"llvm-22-linker-tools","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22-runtime","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22-tools","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"llvm-libunwind1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"mlir-22-tools"},{"binary_name":"python3-clang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"python3-lldb-22","binary_version":"1:22.1.2-1ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13573.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"type":"Ubuntu","score":"low"}]}