Heap Use After Free in function ins_compl_get_exp

Description Heap Use After Free in function inscomplgetexp at insexpand.c:3846 vim version git log commit 7193323b7796c05573f3aa89d422e848feb3a8dc HEAD - master, tag: v9.0.1223, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf01s.dat -c :qa!...

The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to heap based overflow in inscompladd of insexpand.c which allows an attacker to cause an application crash...

Heap-based Buffer Overflow

vim/vim is vulnerable to heap-based buffer overflow. The vulnerability exists in insexpand.c because it reads past end of completion with a long line and 'infercase' which allows an attacker to cause a buffer overflow...

CVE-2022-2343

A heap-based buffer overflow was found in Vim in the inscompladd function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into...

Heap-based Buffer Overflow in function ins_compl_add

Description Heap-based Buffer Overflow in function inscompladd at insexpand.c:751 vim version git log commit 324478037923feef1eb8a771648e38ade9e5e05a HEAD - master, tag: v9.0.0042, origin/master, origin/HEAD POC ./afl/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochbor4s.dat -c :qa!...