EUVD-2023-52307

Malicious code in bioql PyPI...

DEBIAN-CVE-2023-48234

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48233 overflow with count for :s command in vim

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-48234 overflow in nv_z_get_count in vim

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48235 overflow in ex address parsing in vim

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

AZL-10139 CVE-2022-2343 affecting package vim for versions less than 9.0.0050-2

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...

CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...

DEBIAN-CVE-2022-2264

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

UBUNTU-CVE-2022-1735

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969...

Heap-based Buffer Overflow in vim/vim

Description Whilst testing vim built from commit be01090 with Clang 12 + ASan on Ubuntu 18.04, we discovered crafted input which triggers a bug in how vim draws information on the screen, causing a heap-buffer-overflow, WRITE of size 5 to occur. Proof of Concept The disclosed POC is trimmed down ...