Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. There are still doubts about whether this vulnerability truly exists. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of… https://www.cve.org/CVERecord?id=CVE-2026-13574
Post summary
The text announces CVE-2026-13574 affecting llvm up to version 22.1.6, impacting the GCRelocateInst::getBasePtr function, without providing evidence of exploits, PoC, or mitigation.
🚨*CVE* CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of… https://www.cve.org/CVERecord?id=CVE-2026-13574 ----- Traducción: CVE-2026-13574 Se … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-13574 affecting LLVM’s GCRelocateInst::getBasePtr function and provides a link to the official CVE record for additional details.