{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"llvm-toolchain-14","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NKFBPX47K6XWTCBYATPV2A","modified_at":"2026-09-15T09:03:13.735355075Z","published_at":"2024-04-05T15:15:08.270Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-31852","https://security-tracker.debian.org/tracker/CVE-2024-31852"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-31852","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-31852"}],"summary":"LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This a"}