Denial Of Service (DoS)

vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in eval.c which allows an attacker to cause an application crash...

Out-of-Bounds Read

vim is vulnerable to out-of-bound reads. Vulnerability exists in the msgouttransspecial function in message.c to cause an out-of-bounds read that can crash the application...

Out-of-bounds Write

vim is vulnerable to out-of-bounds write. The vulnerability exists due to invalid memory access after diff buffer manipulations in 1diffmarkadjusttp function in diff.c...

Heap-based Buffer Overflow

vim is vulnerable to a heap buffer overflow. The vulnerability exists in parsecmdaddress in function utfptr2char due to a lack of input validation which allows an attacker to inject malicious and crash the system...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds read allowing an attacker to crash the system with a maliciously string constant...

CVE-2022-2304 affecting package vim 8.2.5172-1

CVE-2022-2304 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2344 affecting package vim 8.2.5172-1

CVE-2022-2344 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2284 affecting package vim 8.2.5172-1

CVE-2022-2284 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2289 affecting package vim 8.2.5172-1

CVE-2022-2289 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2285 affecting package vim 8.2.5172-1

CVE-2022-2285 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2287 affecting package vim 8.2.5172-1

CVE-2022-2287 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2257 affecting package vim 8.2.5172-1

CVE-2022-2257 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2343 affecting package vim 8.2.5172-1

CVE-2022-2343 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2264 affecting package vim 8.2.5172-1

CVE-2022-2264 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2288 affecting package vim 8.2.5172-1

CVE-2022-2288 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2286 affecting package vim 8.2.5172-1

CVE-2022-2286 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

Heap-based Buffer Overflow in function compile_lock_unlock in vim/vim

Description Heap-based Buffer Overflow in function compilelockunlock at vim/src/vim9cmds.c:196 vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S poc2hboM.dat -c :qa!...

Buffer Over-read

vim is vulnerable to buffer over-reads. Vulnerability exists in over-read in putoncmdline function in exgetln.c to cause a buffer over-read that can crash the application or disclose sensitive information in the buffer...

Use After Free in function string_quote

Description Use After Free in function stringquote at vim/src/strings.c:777 vim version git log commit c9b6570fab46bf2c246a954cfb8c0d95fe2746b3 grafted, HEAD - master, tag: v9.0.0203, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc1uaf.da...

Out-of-bounds read in function check_vim9_unlet in vim/vim

Description Out-of-bounds read in function checkvim9unlet at vim/src/vim9cmds.c:95 Vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/hbo1min.dat -c :q...