CVE-2026-13573 | llvm llvm-project up to 22.1.6 ValueSymbolTable ValueSymbolTable.cpp llvm::StringMap::insert stack-based overflow (Issue 199187)

A vulnerability labeled as problematic has been found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-13573. Attacking locally is a requirement. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.