CLSA-2026-1778611387 vim: Fix of 3 CVEs

CVE-2022-2257: fix out-of-bounds read in str2special when advancing past the trailing NUL of a menu item with only a modifier message.c, upstream patch 9.0.0009 - CVE-2022-2182: fix heap buffer overflow in parsecmdaddress when address line 0 is used with the ";" separator ":0;/PATTERN/"; clamp...

The vulnerability of the parse_cmd_address() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the parsecmdaddress function exdocmd.c in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...