{"id":"UBUNTU-CVE-2026-13574","details":"A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. There are still doubts about whether this vulnerability truly exists. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.","modified":"2026-07-09T17:15:09.613924914Z","published":"2026-06-29T15:16:00Z","upstream":["CVE-2026-13574"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-13574"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-13574"},{"type":"REPORT","url":"https://github.com/llvm/llvm-project/"},{"type":"REPORT","url":"https://github.com/user-attachments/files/28142619/poc.zip"},{"type":"REPORT","url":"https://vuldb.com/cve/CVE-2026-13574"},{"type":"REPORT","url":"https://vuldb.com/submit/844468"},{"type":"REPORT","url":"https://vuldb.com/vuln/374582"},{"type":"REPORT","url":"https://vuldb.com/vuln/374582/cti"}],"affected":[{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-11~20.04.2"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"bolt-18"},{"binary_name":"clang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"clang-format-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"clang-tidy-18"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"clang-tools-18"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"clangd-18"},{"binary_name":"flang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libc++1-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libc++abi-18-dev-wasm32"},{"binary_name":"libc++abi1-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libclang-cpp18"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libclang-rt-18-dev-wasm64","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libclang1-18"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libclc-18"},{"binary_name":"liblld-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libllvm18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libmlir-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"libomp5-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"libunwind-18"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"lld-18"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"llvm-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"llvm-18-examples","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"llvm-18-linker-tools","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"llvm-18-runtime","binary_version":"1:18.1.8-11~20.04.2"},{"binary_version":"1:18.1.8-11~20.04.2","binary_name":"llvm-18-tools"},{"binary_name":"mlir-18-tools","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.8-11~20.04.2"},{"binary_name":"python3-lldb-18","binary_version":"1:18.1.8-11~20.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.0~rc1-1","1:18.1.0~rc2-3","1:18.1.0~rc2-4","1:18.1.0~++20240126095841+0991d3c7b53d-1~exp1","1:18.1.2-1ubuntu2","1:18.1.2-1ubuntu3","1:18.1.3-1","1:18.1.3-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"clang-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"clang-18-examples"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"clang-format-18"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"clang-tools-18"},{"binary_name":"clangd-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"flang-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libc++1-18"},{"binary_name":"libc++abi-18-dev-wasm32","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libc++abi1-18"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libclang-cpp18"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libclang-rt-18-dev-wasm64","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libclang1-18"},{"binary_name":"libclc-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"liblld-18"},{"binary_name":"liblldb-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"libllvm18"},{"binary_name":"libmlir-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libomp5-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"libunwind-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"lld-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"lldb-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_name":"llvm-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"llvm-18-examples"},{"binary_name":"llvm-18-linker-tools","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"llvm-18-runtime"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"llvm-18-tools"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"mlir-18-tools"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.3-1ubuntu1"},{"binary_version":"1:18.1.3-1ubuntu1","binary_name":"python3-lldb-18"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.1-1ubuntu1~24.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"clang-19"},{"binary_name":"clang-19-examples","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"clang-format-19"},{"binary_name":"clang-tidy-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"clang-tools-19"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"clangd-19"},{"binary_name":"flang-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libc++-19-dev-wasm32"},{"binary_name":"libc++1-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libc++abi-19-dev-wasm32","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libc++abi1-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libclang-cpp19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"libclang-rt-19-dev-wasm32"},{"binary_name":"libclang-rt-19-dev-wasm64","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libclang1-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libclc-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"liblld-19"},{"binary_name":"liblldb-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libllvm19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libmlir-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libomp5-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"libunwind-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"lld-19"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"lldb-19"},{"binary_name":"llvm-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-examples","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-linker-tools","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_name":"llvm-19-tools","binary_version":"1:19.1.1-1ubuntu1~24.04.2"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"mlir-19-tools"},{"binary_version":"1:19.1.1-1ubuntu1~24.04.2","binary_name":"python3-clang-19"},{"binary_name":"python3-lldb-19","binary_version":"1:19.1.1-1ubuntu1~24.04.2"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-17","1:18.1.8-18","1:18.1.8-18build1","1:18.1.8-18ubuntu1","1:18.1.8-18ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"clang-format-18"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"clang-tidy-18"},{"binary_name":"clang-tools-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"clangd-18"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"flang-18"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libc++1-18"},{"binary_name":"libc++abi-18-dev-wasm32","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libc++abi1-18"},{"binary_name":"libclang-cpp18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libclang-rt-18-dev-wasm64"},{"binary_name":"libclang1-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libclc-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"liblld-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"libllvm18"},{"binary_name":"libmlir-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libomp5-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"libunwind-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"lld-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18"},{"binary_name":"llvm-18-examples","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"llvm-18-linker-tools","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"llvm-18-runtime"},{"binary_name":"llvm-18-tools","binary_version":"1:18.1.8-18ubuntu2"},{"binary_version":"1:18.1.8-18ubuntu2","binary_name":"mlir-18-tools"},{"binary_name":"python3-clang-18","binary_version":"1:18.1.8-18ubuntu2"},{"binary_name":"python3-lldb-18","binary_version":"1:18.1.8-18ubuntu2"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.7-3ubuntu1","1:19.1.7-3ubuntu2","1:19.1.7-5ubuntu1","1:19.1.7-5ubuntu2","1:19.1.7-6ubuntu3"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_name":"bolt-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-19-examples"},{"binary_name":"clang-format-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-tidy-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clang-tools-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"clangd-19"},{"binary_name":"flang-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libc++-19-dev-wasm32"},{"binary_name":"libc++1-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libc++abi-19-dev-wasm32","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libc++abi1-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libclang-cpp19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libclang-rt-19-dev-wasm32","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libclang-rt-19-dev-wasm64"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libclang1-19"},{"binary_name":"libclc-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"liblld-19"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"liblldb-19"},{"binary_name":"libllvm19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"libmlir-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"libomp5-19"},{"binary_name":"libunwind-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"lld-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"lldb-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"llvm-19"},{"binary_name":"llvm-19-examples","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"llvm-19-linker-tools"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.7-6ubuntu3"},{"binary_name":"llvm-19-tools","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"mlir-19-tools"},{"binary_name":"python3-clang-19","binary_version":"1:19.1.7-6ubuntu3"},{"binary_version":"1:19.1.7-6ubuntu3","binary_name":"python3-lldb-19"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-21","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llvm-toolchain-21?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:21.1.0-1","1:21.1.2-2ubuntu6"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"clang-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"clang-21-examples","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"clang-format-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"clang-tidy-21"},{"binary_name":"clang-tools-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"clangd-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"flang-21"},{"binary_name":"libc++-21-dev-wasm32","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libc++1-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libc++abi-21-dev-wasm32","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libc++abi1-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"libclang-cpp21"},{"binary_name":"libclang-rt-21-dev-wasm32","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"libclang-rt-21-dev-wasm64"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"libclang1-21"},{"binary_name":"libclc-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"liblld-21"},{"binary_name":"liblldb-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libllvm21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libmlir-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"liboffload-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libomp5-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"libunwind-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"lld-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"lldb-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"llvm-21"},{"binary_name":"llvm-21-examples","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"llvm-21-linker-tools"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"llvm-21-runtime"},{"binary_name":"llvm-21-tools","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"mlir-21-tools","binary_version":"1:21.1.2-2ubuntu6"},{"binary_name":"python3-clang-21","binary_version":"1:21.1.2-2ubuntu6"},{"binary_version":"1:21.1.2-2ubuntu6","binary_name":"python3-lldb-21"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-18","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-18?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.1.8-18ubuntu2","1:18.1.8-20ubuntu2","1:18.1.8-20ubuntu4","1:18.1.8-20ubuntu5","1:18.1.8-20ubuntu8"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-18-examples","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"clang-format-18"},{"binary_name":"clang-tidy-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"clang-tools-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"clangd-18"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"flang-18"},{"binary_name":"libc++-18-dev-wasm32","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libc++1-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libc++abi-18-dev-wasm32"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libc++abi1-18"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libclang-cpp18"},{"binary_name":"libclang-rt-18-dev-wasm32","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libclang-rt-18-dev-wasm64"},{"binary_name":"libclang1-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"libclc-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"liblld-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"liblldb-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libllvm18"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libmlir-18"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"libomp5-18"},{"binary_name":"libunwind-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"lld-18"},{"binary_name":"lldb-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18-examples","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18-linker-tools","binary_version":"1:18.1.8-20ubuntu8"},{"binary_name":"llvm-18-runtime","binary_version":"1:18.1.8-20ubuntu8"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"llvm-18-tools"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"mlir-18-tools"},{"binary_version":"1:18.1.8-20ubuntu8","binary_name":"python3-clang-18"},{"binary_name":"python3-lldb-18","binary_version":"1:18.1.8-20ubuntu8"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-19","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-19?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:19.1.7-6ubuntu3","1:19.1.7-7ubuntu1","1:19.1.7-10ubuntu1","1:19.1.7-16ubuntu1","1:19.1.7-19ubuntu2","1:19.1.7-20ubuntu1","1:19.1.7-20ubuntu4"],"ecosystem_specific":{"binaries":[{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"bolt-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clang-19"},{"binary_name":"clang-19-examples","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clang-format-19"},{"binary_name":"clang-tidy-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"clang-tools-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"clangd-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"flang-19"},{"binary_name":"libc++-19-dev-wasm32","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libc++abi-19-dev-wasm32"},{"binary_name":"libclang-cpp19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libclang-rt-19-dev-wasm32"},{"binary_name":"libclang-rt-19-dev-wasm64","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"libclang-rt-19-dev-win"},{"binary_name":"libclang1-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libclc-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"liblld-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"liblldb-19"},{"binary_name":"libllvm19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"libmlir-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"liboffload-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"lld-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"lldb-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"llvm-19"},{"binary_version":"1:19.1.7-20ubuntu4","binary_name":"llvm-19-examples"},{"binary_name":"llvm-19-linker-tools","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19-runtime","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"llvm-19-tools","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"mlir-19-tools","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"python3-clang-19","binary_version":"1:19.1.7-20ubuntu4"},{"binary_name":"python3-lldb-19","binary_version":"1:19.1.7-20ubuntu4"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-21","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-21?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:21.1.2-2ubuntu6","1:21.1.6-3ubuntu1","1:21.1.7-1ubuntu2","1:21.1.8-1ubuntu1","1:21.1.8-3ubuntu1","1:21.1.8-4ubuntu2","1:21.1.8-6ubuntu1"],"ecosystem_specific":{"priority_reason":"CLI crash only","binaries":[{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"bolt-21"},{"binary_name":"clang-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-21-examples","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-format-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-tidy-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"clang-tools-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"clangd-21"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"flang-21"},{"binary_name":"libc++-21-dev-wasm32","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libc++abi-21-dev-wasm32"},{"binary_name":"libclang-cpp21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"libclang-rt-21-dev-wasm32","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"libclang-rt-21-dev-wasm64","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libclang-rt-21-dev-win"},{"binary_name":"libclang1-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"libclc-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"liblld-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"liblldb-21"},{"binary_name":"libllvm21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"libmlir-21"},{"binary_name":"liboffload-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"lld-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"lldb-21"},{"binary_name":"llvm-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_version":"1:21.1.8-6ubuntu1","binary_name":"llvm-21-examples"},{"binary_name":"llvm-21-linker-tools","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21-runtime","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"llvm-21-tools","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"mlir-21-tools","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"python3-clang-21","binary_version":"1:21.1.8-6ubuntu1"},{"binary_name":"python3-lldb-21","binary_version":"1:21.1.8-6ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}},{"package":{"name":"llvm-toolchain-22","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/llvm-toolchain-22?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:22.1.0~+rc3-0ubuntu2","1:22.1.0-2ubuntu1","1:22.1.1-1ubuntu1","1:22.1.2-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"bolt-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"clang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"clang-22-examples","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"clang-format-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"clang-tidy-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"clang-tools-22"},{"binary_name":"clangd-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"flang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libc++-22-dev-wasm32"},{"binary_name":"libc++1","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libc++abi-22-dev-wasm32","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libc++abi1","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-cpp22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libclang-rt-22-dev-wasm32","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libclang-rt-22-dev-wasm64"},{"binary_name":"libclang-rt-22-dev-win","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libclang1-22"},{"binary_name":"libclc-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"liblld-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"liblldb-22"},{"binary_name":"libllvm22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"libmlir-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"liboffload-22"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"libomp5"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"lld-22"},{"binary_name":"lldb-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22-examples","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-22-linker-tools","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"llvm-22-runtime"},{"binary_name":"llvm-22-tools","binary_version":"1:22.1.2-1ubuntu1"},{"binary_name":"llvm-libunwind1","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"mlir-22-tools"},{"binary_name":"python3-clang-22","binary_version":"1:22.1.2-1ubuntu1"},{"binary_version":"1:22.1.2-1ubuntu1","binary_name":"python3-lldb-22"}],"priority_reason":"CLI crash only"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-13574.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"type":"Ubuntu","score":"low"}]}