Security

Report a vulnerability

SECURITY.md

Security issues

This repository is for reporting security issues with LLVM.

Please see README.md for pointers on how to file your report. There are very important guidelines there; if they are not followed, we will ask you to follow them before reviewing your report.

[libc++] Buffer overflow in basic_filebuf when writing to the stream
GHSA-p57v-c3wj-w37w published Feb 3, 2026 by kbeyls

Low
Binary executable injection vulnerability in clang-linker-wrapper.exe
GHSA-hrx2-grgx-9vhg published Aug 19, 2025 by kbeyls

Low
CMSE secure state may leak from stack to floating-point registers
GHSA-wh65-j229-6wfp published Feb 4, 2025 by smithp35

Low
Test that a non-admin can create an advisory (no vulnerability).
GHSA-34gr-6c7h-cc93 published Apr 30, 2024 by kbeyls

Low

Learn more about advisories related to llvm/llvm-security-repo in the GitHub Advisory Database