CVE-2023-46049: Null Pointer Dereference
LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46049?
CVE-2023-46049 is currently under investigation regarding its severity as it involves a NULL pointer dereference in LLVM.
How do I fix CVE-2023-46049?
To mitigate CVE-2023-46049, ensure you are using an updated version of LLVM that addresses this vulnerability.
What causes the CVE-2023-46049 vulnerability?
CVE-2023-46049 is caused by a NULL pointer dereference in the parseOneMetadata() function when processing a crafted pdflatex.fmt file.
Which versions of LLVM are affected by CVE-2023-46049?
The vulnerability is identified in LLVM 15.0.0, but further assessment is required to confirm its impact on other versions.
Is there a known exploit for CVE-2023-46049?
As of now, there is no publicly available exploit for CVE-2023-46049, but it is advisable to monitor updates from LLVM.