use after free in skipwhite

Description When fuzzing vim commit 1d97db3d9 works with latest build and latest commit 3760bfddc per this time of this report, I discovered a use after free. Proof of Concept Here is the minimized poc bash spe!fl norm0z= norm0yy no0 Psvc sil!norm0 norm0 How to build bash LD=lld AS=llvm-as...

USN-5460-1 vim vulnerabilities

It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. CVE-2022-0554 It was discovered that Vim was not properly performing bounds checks for column numbers when replacing tabs...

CLSA-2022-1654529495 Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796

CVE-2022-1785: fix out-of-bounds write by disallowing changing window in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line...

Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796

CVE-2022-1785: fix out-of-bounds write by disallowing changing window in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line...

CLSA-2022-1654525460 Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796

CVE-2022-1785: fix out-of-bounds write by disallowing changing window in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1799)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...

Fedora: Security Advisory for vim (FEDORA-2022-d94440bf0e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1816)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...

Binary vulnerability in vim (CNVD-2022-50691)

Vim is a cross-platform text editor. A binary vulnerability exists in vim, which can be exploited by an attacker to gain control of a server...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5460-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5460-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose...

Binary vulnerability in vim (CNVD-2022-50689)

Vim is a cross-platform text editor. A binary vulnerability exists in vim, which can be exploited by an attacker to gain control of a server...

Binary vulnerability in vim (CNVD-2022-50690)

Vim is a cross-platform text editor. A binary vulnerability exists in vim, which can be exploited by an attacker to gain control of a server...

Out-of-bounds Read in vim/vim

...

Use After Free in vim/vim

...

Use After Free

Use After Free in GitHub repository vim/vim prior to 8.2.4979...

[SECURITY] Fedora 34 Update: vim-8.2.5046-1.fc34

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

CVE-2022-1420 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1420 affecting package vim for versions less than 8.2.4925-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1381 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1381 affecting package vim for versions less than 8.2.4925-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1621 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1621 affecting package vim for versions less than 8.2.4925-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1616 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1616 affecting package vim for versions less than 8.2.4925-1. An upgraded version of the package is available that resolves this issue...