CVE-2022-1785

🗓️ 19 May 2022 00:00:00Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 166 Views

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.497

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Vim (CVE-2022-1785, CVE-2022-1897, CVE-2022-1927)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-1785	3 Nov 202218:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak prior to 21.0.4	7 Sep 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
Huntr	Out-of-bounds write in function vim_regsub_both	16 May 202213:43	–	huntr
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2022-1829)	21 Jul 202200:00	–	nessus

NVD

Node

vim vimRange<8.2.4977

Node

debian debian_linuxMatch10.0

[
  {
    "vendor": "vim",
    "product": "vim/vim",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "8.2.4977",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202208-32
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00032.html
github	www.github.com/vim/vim/commit/e2bd8600b873d2cd1f9d667c28cba8b1dba18839
huntr	www.huntr.dev/bounties/8c969cba-eef2-4943-b44a-4e3089599109
security	www.security.gentoo.org/glsa/202305-16
lists	www.lists.debian.org/debian-lts-announce/2025/03/msg00023.html

03 Nov 2025 21:15Current

7.6High risk

Vulners AI Score7.6

CVSS 24.6

CVSS 3.17.8

CVSS 37.3

EPSS0.00044

CWE-787