CVE-2022-3256

A heap use-after-free vulnerability was found in vim's movemark function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free th...

CVE-2022-1725

A NULL pointer dereference vulnerability was found in Vim's vimregexecstring function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service. Mitigation Untrusted vim scrip...

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3153 affecting package vim 9.0.0360-1

CVE-2022-3153 affecting package vim 9.0.0360-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3134 affecting package vim 9.0.0360-1

CVE-2022-3134 affecting package vim 9.0.0360-1. An upgraded version of the package is available that resolves this issue...

ROS-20221004-01

Vim text editor vulnerability is related to a boundary error during file processing in the function exfinally in exeval.c. Exploitation of the vulnerability could allow an attacker acting remotely, create a special file, force the victim to open it, cause memory corruption, and execute arbitrary...

Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs

Summary 3.5 Fixes the following vulnerabilities: CVE-2022-1154, CVE-2018-25032, CVE-2020-29582, CVE-2022-24329, CVE-2022-29217, CVE-2022-22476, CVE-2022-1271, CVE-2022-0778 Vulnerability Details CVEID:CVE-2022-1154 DESCRIPTION: Vim is vulnerable to a heap-based buffer overflow, caused by a...

Slackware: Security Advisory (SSA:2022-273-04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-1226 · Vim +9 · Vim +9

Name of the Vulnerable Software and Affected Versions: Vim versions 8.1.2269 through 9.0.0339 Description: A null pointer dereference issue was discovered in the gui x11 create blank mouse function in gui x11.c, allowing attackers to cause denial of service or other unspecified impacts. This issu...

Use After Free in vim/vim

...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists because the illegal memory access when replacing in virtualedit mode which allows an attacker to crash the application via malicious input...

Use-After-Free

vim is vulnerable to use-after-free. Referencing memory after it has been freed may cause the program to crash, use unexpected values, or execute code, leading to heap use-after-free...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.0623-i586-1slack15.0.txz: Upgraded. Fixed use-after-free and stack-based buffer overflow. Thanks to marav for the heads-up. For...

OESA-2022-1975 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Stack-based Buffer Overflow in vim/vim

...

The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the utfcptr2len function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by opening a specially created malicious file...