CLSA-2026-1779183235 vim: Fix of 6 CVEs

CVE-2021-4069: copy mlgetcurline in exopen so a flushed line buffer is not used after vimregexec - CVE-2022-2000: truncate IObuff with "..." in appendcommand when remaining space is below threshold - CVE-2022-3099: guard docmdline breakpoint lookup with linesga.galen currentline check -...

The vulnerability of the ex_open() function (src/ex_docmd.c) in the Vim text editor, which allows an attacker to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the exopen function src/exdocmd.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

Vim memory mis-reference vulnerability

Vim is a UNIX-based editor. vim is vulnerable to a memory mis-reference vulnerability in the exopen function in src/exdocmd.c, which could be exploited to cause a denial of service or code execution...

CVE-2021-4069

A heap use-after-free flaw was found in Vim's exopen function in src/exdocmd.c file. This flaw allows an attacker to trick the victim into opening a specially crafted file that triggers a use-after-free error, allowing the attacker to compromise the system and execute arbitrary code...

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. vim is vulnerable to a memory mis-reference vulnerability in the exopen function in src/exdocmd.c, which could be exploited to cause a denial of service or code execution...