Lucene search

K
redhatcveRedhat.comRH:CVE-2022-2264
HistoryJul 05, 2022 - 11:41 a.m.

CVE-2022-2264

2022-07-0511:41:46
redhat.com
access.redhat.com
15

0.001 Low

EPSS

Percentile

47.9%

A heap buffer overflow vulnerability was found in Vim’s inc() function of misc2.c. This issue occurs because Vim reads beyond the end of the line with a put command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds read that causes a crash in the CLI tool.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.