CLSA-2026-1779183235 vim: Fix of 6 CVEs

CVE-2021-4069: copy mlgetcurline in exopen so a flushed line buffer is not used after vimregexec - CVE-2022-2000: truncate IObuff with "..." in appendcommand when remaining space is below threshold - CVE-2022-3099: guard docmdline breakpoint lookup with linesga.galen currentline check -...

The vulnerability of the `find_pattern_in_path` function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the findpatterninpath function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the find_pattern_in_path() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the findpatterninpath function in the Vim text editor lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created file...

CVE-2022-1898

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use-after-free vulnerability in the findpatterninpath function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with...

Use After Free in function utf_ptr2char

Description Use After Free in function utfptr2char at mbyte.c:1794 vim version git log commit be99042b03edf7b8156c9adbc23516bfcf2cec0f HEAD - master, tag: v8.2.5044, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf2s.dat -c :qa!...

heap-use-after-free in function find_pattern_in_path

Description heap-use-after-free in function findpatterninpath at search.c:3683 vim version git log commit 5a8fad32ea9c075f045b37d6c7739891d458f82b HEAD - master, tag: v8.2.4962, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/pochuafs.dat -c...