Vim code issue vulnerability (CNVD-2023-40575)

Vim is a cross-platform text editor. A code issue vulnerability exists in Vim versions prior to 9.0.1531, which stems from a null pointer dereference in getregister in register.c:311. An attacker could exploit this vulnerability to cause a denial of service attack...

Null pointer dereference in get_register at register.c:311

--- Description Null pointer dereference in getregister at register.c:311. ycurrent variable is 0 because of name variable. Version $ git log commit 3ea62381c527395ae701715335776f427d22eb7b HEAD - master, tag: v9.0.1425, origin/master, origin/HEAD Author: Amaan Qureshi Date: Thu Mar 23 15:45:46...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exists in doput function of register.c due to become negative of command column which allows an attacker to do a buffer overflow...