CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-0359

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Critical Photon OS Security Update - PHSA-2022-0356

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'polkit', 'glibc', 'openssh', 'linux-rt', 'linux', 'vim' packages of Photon OS have been released...

DEBIAN-CVE-2022-0351

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

CVE-2022-0351

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

CVE-2022-0351

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0351

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

CVE-2022-0318

A flaw was found in vim. The vulnerability occurs due to reading beyond the end of a line in the utfheadoff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts wi...

in vim/vim

Description Out of bound 1 byte read in vim. commit : 06b77229ca704d00c4f138ed0377556e54d5851f Proof of Concept $ echo -ne "c2lsMG5vcm0WcTAHMA==" | base64 -d minimizedpoc valgrind $ ./vg-in-place -s ./vim -u NONE -i NONE -n -X -Z -e -s -S ./minimizedpoc -c ":qa!" ==3442167== Invalid read of size ...

Heap-based Buffer Overflow in vim/vim

Description Heap-buffer-overflow on write in vim This issue was created to separate this one and was fixed with Patch 8.2.4218. Proof of Concept Steps to reproduce: echo -n bm9ybTBRgFBTMP8wMDCysDAwMDAwMDAwMDAwMDAw/zD/g7IwMDAwMDAwMDAwjjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAD | base64 -d heapowpoc2 vim ...

CVE-2022-0128

A heap-based out-of-bounds read flaw was found in vim. This issue allows an attacker to input a specially crafted file causing an application to crash, leading to a denial of service and possibly disclosing a small amount of memory. Mitigation Untrusted vim scripts with -s scriptin are not...

Heap-based Buffer Overflow in vim/vim

...

CVE-2022-0351

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

Vim 缓冲区错误漏洞

Vim is a UNIX-based editor. buffer overflow vulnerability exists in versions prior to vim 8.2, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorrect read and write operations being performed to...

PT-2022-1730

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the vim text editor, specifically in the getexmodeline function. This overflow can be exploited to cause a buffer overflow, potentially allowing an...

CVE-2022-0351 Access of Memory Location Before Start of Buffer in vim/vim

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

CVE-2022-0351: Access of Memory Location Before Start of Buffer

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...

vim buffer overflow vulnerability (CNVD-2022-08159)

Vim is an editor for the UNIX platform. A buffer error vulnerability exists in vim that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated oth...

CVE-2022-0261

A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing software, modify memory, and possible code execution. Mitigation Untrusted vim scripts...

in vim/vim

Description A heap-based OOB read of size 4 occurs when a user tries to open a vim session file specified below. This happens regardless of any command line options that could be specified to restrict vim, such -Z and -m. This bug has been found on default vim build lastest commit hash...