Vim 缓冲区错误漏洞

Vim is a cross-platform text editor open-sourced by Vim. A buffer error vulnerability exists in Vim versions prior to 9.1.1043, which stems from the presence of a segmentation error...

CLSA-2025-1737153872 vim: Fix of CVE-2023-0433

CVE-2023-0433: check for not going over the end of the line to fix reading past the end of a line when formatting text...

The vulnerability of the BufWinLeave function in the Vim text editor allows a hacker to execute arbitrary commands.

The vulnerability of the BufWinLeave function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

...

SUSE CVE-2024-47814

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

AZL-50138 CVE-2024-47814 affecting package vim for versions less than 9.1.0791-1

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor from the Vim open source. A resource management error vulnerability exists in Vim versions prior to 9.1.0764, which stems from memory reuse after release...

The vulnerability of the buffer.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the num_divide function in the Vim text editor, which allows a hacker to access confidential data and also trigger a service failure.

The vulnerability of the numdivide function in the Vim text editor is related to incorrect numerical calculations when processing values with a comma. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

DEBIAN-CVE-2024-43790

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

Vim Memory Reference Error Vulnerability (CNVD-2024-40461)

Vim is Vim open source a cross-platform text editor . Vim suffers from a Memory Reference Error vulnerability that stems from a confusion in the instruction responsible for freeing memory in parameter list handling. An attacker can exploit the vulnerability which may result in a program crash,...

OESA-2024-1982 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2024-41957

A double-free and use-after-free vulnerability was found in the Vim editor. This flaw exists due to the corresponding tagstack being used twice when closing the window and if the quick fix list belonging to that window is also cleared using the same tagstack data. In this instance, Vim will try t...

AZL-47340 CVE-2024-41957 affecting package vim for versions less than 9.0.2121-4

Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points...

DEBIAN-CVE-2024-41965

Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a nam...

The vulnerability of the Did_set_langmap() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Didsetlangmap function in the Vim text editor is related to the use of sprintf to write to the error buffer, which is passed to functions that handle option renames. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Vim text editor, related to integer overflow or bypassing, allows attackers to cause a service failure.

The vulnerability of the Vim text editor lies in the fact that the values used for the :s command are stored more than is necessary for a single long variable. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the shift_line() function in the Vim text editor, allowing a hacker to trigger a service failure

The vulnerability of the shiftline function in the Vim text editor is related to the use of extremely large values during row shifting. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Amazon Linux 2 : vim (ALAS-2024-2384)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2384 advisory. Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the...

Low: vim

Issue Overview: Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in...