CLSA-2026-1777323039 vim: Fix of 3 CVEs

🗓️ 27 Apr 2026 20:50:44Reported by GoogleType

osv🔗 osv.dev👁 30 Views

Vim fixes CVEs including double free in Vim9, use-after-free in SpellFileMissing, and heap overflow in ins_compl_add_infercase.

Reporter	Title	Published	Views	Family All 277
Huntr	Heap-based Buffer Overflow in function ins_compl_add	6 Jul 202205:20	–	huntr
Huntr	None in vim/vim	25 Dec 202110:47	–	huntr
Huntr	Use After Free in function did_set_string_option	27 Sep 202208:53	–	huntr
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues	8 Aug 202417:27	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.	7 Apr 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues (2)	1 Aug 202417:22	–	ibm
ATTACKERKB	CVE-2022-2343	8 Jul 202218:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus