Logo
›
›vulnerability›CVE-2023-46049
Name
CVE-2023-46049
Source
NVD ( link)Debian ( link)
Description
LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.
CWEs
CWE-476
Published Date
Updated Date
Workaround
-
Advisories

Analysis#

Affected Component
Analysis
llvm
Patched

Vulnerability Ratings#

5.3
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
llvm
buildroot
2025.02.x
15.0.7
Not Affected
llvm
buildroot
master
22.1.8
Not Affected
llvm
openwrt
master
22.1.5
Not Affected
llvm
openwrt
openwrt-25.12
21.1.3
Not Affected
llvm
yocto
master
22.1.8
Not Affected
llvm
yocto
scarthgap
18.1.8
Not Affected

Resolved with patches#

llvm (yocto:kirkstone)

#
Title
Author
Resolve
1
Patch #1
Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
CVE-2023-46049