CVE-2023-48233: Integer Overflow or Wraparound

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-48231: Use After Free

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...

CVE-2023-48237: Integer Overflow or Wraparound

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

CVE-2023-48236: Integer Overflow or Wraparound

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

Vim Security Vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim v9.0.2107, which stems from a floating point exception that may occur when calculating line offsets for extra-long lines and enabling smooth scrolling and the cpo setting contains the n flag...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2108, which stems from the fact that the program may abort if the count after the s command is greater than the count of a long integer variable...

CVE-2023-48234: Integer Overflow or Wraparound

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2110, which stems from an overflow that can be inadvertently caused when parsing relative ex addresses...

Vim Resource Management Error Vulnerability

Vim is a cross-platform text editor. A resource management error vulnerability exists in versions prior to Vim v9.0.2106, which stems from the fact that when a window is closed, vim may attempt to access a window structure that has been freed...

PT-2023-8853

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2106 Description The issue is related to the function win close in the text editor Vim, where it may try to access an already freed window structure when closing a window. This could potentially allow an attacker to...

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2111, which stems from the fact that users may overflow larger values when using the z= command...

Vim input validation vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2109, which stems from the possibility that a given large count may overflow when obtaining the count of a normal mode z command. An attacker could exploit this vulnerability to cause...

PT-2023-8858

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2111 Description The issue is related to the use of the z= command in Vim, which can cause an overflow of the count with values larger than MAX INT. This can lead to a crash, but the impact is low and user interaction...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-431)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-431 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Amazon Linux 2 : vim (ALAS-2023-2338)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2338 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Vim Heap Buffer Overflow DoS

The vulnerability of the vimiswordpbuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service interruptions through ...

Vim diff_write_buffer DoS

The vulnerability of the diffwritebuffer function in the Vim text editor is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created file...

Vim get_register function Use-After-Free

The vulnerability of the getregister function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...