This vulnerability exists in llvm-project versions 22.1.0 to 22.1.6 in the ValueSymbolTable module's llvm::StringMap::insert function, where improper handling leads to a stack-based buffer overflow. The flaw requires local attacker privileges to exploit and does not require user interaction. Although an exploit is publicly available, the vendor has not yet responded with a fix or mitigation. The CVSS 4.0 vector indicates low attack complexity and privileges required, with no impact on confidentiality, integrity, or availability beyond local escalation.

Successful exploitation could lead to a stack-based buffer overflow, potentially allowing an attacker with local access to execute arbitrary code or cause a denial of service. The impact is limited by the requirement for local access and low privileges, and no direct impact on confidentiality, integrity, or availability is indicated beyond the overflow itself.

No official patch or remediation is currently available. Users should monitor the vendor's advisories for updates. Until a fix is released, restrict local access to trusted users only and consider applying any available workarounds if provided by the vendor. Avoid running untrusted code locally that could trigger this vulnerability.