Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vggp-p864-ph99

Опубликовано: 27 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.

EPSS

Процентиль: 41%
0.00191
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.

CVSS3: 5.3
nvd
почти 2 года назад

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.

CVSS3: 5.3
debian
почти 2 года назад

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() f ...

EPSS

Процентиль: 41%
0.00191
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-476