CVE-2022-1621 Heap buffer overflow in vim_strncpy find_word in vim/vim

🗓️ 09 May 2022 00:00:00Reported by GoogleType

osv🔗 osv.dev👁 48 Views

Heap buffer overflow in vim_strncpy find_word, GitHub repository vim/vim prior to 8.2.4919. Can crash software, bypass protection mechanism, modify memory, possible remote execution

Reporter	Title	Published	Views	Family All 150
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of integrity due to CVE-2022-1621	3 Nov 202218:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Vim (CVE-2022-1621)	12 Jan 202321:59	–	ibm
Huntr	Heap buffer overflow in vim_strncpy find_word	28 Apr 202220:50	–	huntr
ALT Linux	Security fix for the ALT Linux 10 package vim version 4:8.2.5019-alt1	31 May 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1	2 Jun 202200:00	–	altlinux
ATTACKERKB	CVE-2022-1621	10 May 202214:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus

Source	Link
huntr	www.huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb
support	www.support.apple.com/kb/HT213488
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1621.json
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1621
security	www.security.gentoo.org/glsa/202208-32
security	www.security.gentoo.org/glsa/202305-16
github	www.github.com/vim/vim/commit/7c824682d2028432ee082703ef0ab399867a089b
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
seclists	www.seclists.org/fulldisclosure/2022/Oct/41

16 Apr 2026 04:35Current

8.1High risk

Vulners AI Score8.1

CVSS 37.3

EPSS0.00117