CVE-2024-47814: Use After Free

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

PT-2024-7290

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.0764 Description: The issue is related to a use-after-free problem in the BufWinLeave function of the Vim text editor. This occurs when a buffer is closed and the BufWinLeave auto command is triggered, potentially...

Vim resource management error vulnerability

Vim is a cross-platform text editor from the Vim open source. A resource management error vulnerability exists in Vim versions prior to 9.1.0764, which stems from memory reuse after release...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to multiple Vim vulnerabilities

Summary Multiple potential vulnerabilities in Vim has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-0128 DESCRIPTION: Vim could allow a local attacker to obtain...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to multiple Vim vulnerabilities

Summary Multiple potential vulnerabilities in Vim has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-0407 DESCRIPTION: Vim is vulnerable to a heap-based buffer...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to multiple vulnerabilities

Summary Multiple potential vulnerabilities in Vim has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-2849 DESCRIPTION: Vim is vulnerable to a heap-based buffer...

Ubuntu: Security Advisory (USN-7048-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7048-1: Vim vulnerability

Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflow. An attacker could possibly use this issue to cause a denial of service...

USN-7048-1 vim vulnerability

Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflow. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Vim vulnerability (USN-7048-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7048-1 advisory. Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to...

RHSA-2021:4517 Red Hat Security Advisory: vim security update

Bulletin has no description...

Vim num_divide function Confidential Data DoS

The vulnerability of the numdivide function in the Vim text editor is related to incorrect numerical calculations when processing values with a comma. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

Vim did_set_spelllang Use-After-Free

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

Vim alloc.c Heap Buffer Overflow DoS

The vulnerability in the alloc.c component of the Vim text editor relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vim buffer overflow DoS

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vim skipwhite DoS

The vulnerability of the skipwhite function in the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious user to cause a service failure...

Vim inc function Use-After-Free

The vulnerability of the inc function in the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vim mark.c Data Compromise

The vulnerability of the mark.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

Vim buffer overflow vulnerability (CNVD-2024-40453)

Vim is Vim open source a cross-platform text editor . A buffer overflow vulnerability exists in Vim. The vulnerability stems from a boundary error when the application handles untrusted input. A remote attacker can exploit the vulnerability to execute arbitrary code on the system or cause a denia...

Vim alist_add Command Execution

The vulnerability of the alistadd function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...