CVE-2023-29933:
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component...
5.5
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.03534%
CWE
Published
5/5/2023
Updated
4/4/2024
KEV Status
No
Technology
-
Technical Details
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The primary evidence for the vulnerable function comes from the stack trace provided in the GitHub issue #59442. The trace explicitly points to mlir::Block::getArgument
as the function where the segmentation fault occurs. Although the commit bd456297
is mentioned as the one containing the fault, and a later commit 6c01b5c
likely fixed it, I was unable to fetch the details of these commits. However, the stack trace is a strong indicator. The vulnerability description also directly names mlir::Block::getArgument
as the component involved in the segmentation fault.