CVE-2023-29935
https://notcve.org/view.php?id=CVE-2023-29935
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced. • https://github.com/llvm/llvm-project/issues/59182 • CWE-617: Reachable Assertion •
CVE-2023-29942
https://notcve.org/view.php?id=CVE-2023-29942
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType. • https://github.com/llvm/llvm-project/issues/59990 • CWE-125: Out-of-bounds Read •
CVE-2023-26924
https://notcve.org/view.php?id=CVE-2023-26924
LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior." • https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c https://github.com/llvm/llvm-project/issues/60216 https://llvm.org/docs/Security.html#what-is-considered-a-security-issue • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •