CVE-2022-2845

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

AZL-10596 CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

DEBIAN-CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

Design/Logic Flaw

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

UBUNTU-CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

NULL Pointer Dereference in vim/vim

...

Use After Free in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Improper Validation of Specified Quantity in Input in vim/vim

...

Use After Free in function vim_vsnprintf_typval

Description Use After Free in function vimvsnprintftypval at vim/src/strings.c:2299. vim version git log commit 9e043181ad51536f23d069e719d6f6b96c4c0ec0 grafted, HEAD - master, tag: v9.0.0226, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/poc4huaf.dat -c...

CVE-2022-2889 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor, and a resource management error vulnerability exists in versions prior to Vim 9.0.0225, which stems from a confusion in the directive responsible for freeing memory in findvaralsoinscript. An attacker could use this vulnerability to potentially crash the...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

The vulnerability of the generate_loadvar() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the generateloadvar function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vim latin_ptr2len function buffer overflow vulnerability

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions prior to Vim 9.0.0220, which stems from the lack of proper validation of user-supplied data by the latinptr2len function, and can be exploited by attackers to cause remote code execution...

The vulnerability of the find_var_also_in_script() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the findvaralsoinscript function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...