Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-29935

20
FAUCET Score

CVE-2023-29935 describes an assertion failure in llvm-project commit a0138390, specifically within the LLVM compiler infrastructure. This vulnerability carries a CVSS score of 5.5 (Medium), indicating it can be triggered locally with low attack complexity, potentially leading to a denial of service. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
2022-11-23CPE matchmatch criteria
cpe:2.3:a:llvm:llvm:2022-11-23:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.22%
Probability of exploitation in next 30 days
EPSS Percentile
12.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0022 is in the 16th percentile among its peer group of 5,760 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: cbl2 rust 1.72.0-1 on CBL Mariner 2.0Fixed in: 1.72.0-1
microsoftpatch availablevia msrc
Product: cbl2 clang16 16.0.0-2 on CBL Mariner 2.0Fixed in: 16.0.0-2

Vendor Advisories (2)

microsoft2023-May/CVE-2023-29935Moderate

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.

May 9, 2023
redhatCVE-2023-29935Moderate

llvm: gpu-to-llvm Pass crashed with error message

May 5, 2023

References

github.com / llvm/llvm-project/issues/59182
Issue TrackingPatch