The vulnerability of the get_lisp_indent() function in the Vim text editor allows a hacker to gain unauthorized access to protected information.

The vulnerability of the getlispindent function in the Vim text editor is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the get_lisp_indent() function in the Vim text editor allows a hacker to execute arbitrary code.

Vim text editor’s getlispindent function has a vulnerability related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the cmdline_insert_reg() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cmdlineinsertreg function exgetln.c in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2014)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

CLSA-2022-1657182572 Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

CLSA-2022-1657182377 Fixed CVEs in vim: CVE-2022-2129, CVE-2022-2125, CVE-2022-1720, CVE-2022-2124, CVE-2022-2126

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

NULL Pointer Dereference in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Out-of-bounds Write in vim/vim

...

Important Photon OS Security Update - PHSA-2022-0415

Updates of 'vim', 'mysql', 'nxtgn-openssl' packages of Photon OS have been released...

Vim Buffer Overflow Vulnerability (CNVD-2022-68101)

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 9.0.0035, which stems from a boundary error in the spelldumpcompl function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the syste...

Important Photon OS Security Update - PHSA-2022-3.0-0415

Updates of 'vim', 'nxtgn-openssl', 'mysql' packages of Photon OS have been released...

Oracle Linux 9 : vim (ELSA-2022-5242)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5242 advisory. - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior -...

Heap-based buffer overflow in function ins_compl_add

Description Heap-based buffer overflow in function inscompladd at insexpand.c:751 Version commit b8329db36a886355e6e9cb9986a3668fef78c438 HEAD - master, tag: v9.0.0044 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc42min -c :qa!...

CVE-2022-2304

A stack-based buffer overflow vulnerability was found in Vim's spelldumpcompl function of the src/spell.c file. This issue occurs because the spell dump goes beyond the end of an array when crafted input is processed. This flaw allows an attacker to trick a user into opening a specially crafted...

Heap Use After Free in function skipwhite

Description Heap Use After Free in function skipwhite at charset.c:1428 vim version git log commit 324478037923feef1eb8a771648e38ade9e5e05a HEAD - master, tag: v9.0.0042, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf4s.dat -c :qa!...

PT-2022-5218 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0046 Description: The issue is related to a use after free error in the skipwhite function of the charset.c component in the Vim text editor. This could allow a remote attacker to access sensitive data, compromise da...

Vim Resource Management Error Vulnerability (CNVD-2022-68093)

Vim is a cross-platform text editor. versions prior to Vim 9.0 are vulnerable to a resource management error that stems from the existence of post-release reuse. An attacker could exploit the vulnerability to potentially cause program crashes, arbitrary code execution, etc...

Vim Buffer Overflow Vulnerability (CNVD-2022-68102)

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 9.0, which stems from a boundary error in parsecommandmodifiers when handling untrusted input. A remote attacker could exploit this vulnerability to cause data corruption, crash, or code executio...