Use After Free in vim/vim

...

CVE-2022-2889

A use-after-free vulnerability was found in Vim in the findvaralsoinscript function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted fil...

Out-of-bound Read

vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. A malicious user is able to cause the application to crash due to a heap-based buffer overflow in function compilelockunlock in vim/src/vim9cmds.c...

CVE-2022-2845

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

AZL-10596 CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

DEBIAN-CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

Design/Logic Flaw

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

UBUNTU-CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

CVE-2022-2889

Use After Free in GitHub repository vim/vim prior to 9.0.0225...

NULL Pointer Dereference in vim/vim

...

Use After Free in vim/vim

...

Heap-based Buffer Overflow in vim/vim

...

Improper Validation of Specified Quantity in Input in vim/vim

...

Use After Free in function vim_vsnprintf_typval

Description Use After Free in function vimvsnprintftypval at vim/src/strings.c:2299. vim version git log commit 9e043181ad51536f23d069e719d6f6b96c4c0ec0 grafted, HEAD - master, tag: v9.0.0226, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/poc4huaf.dat -c...

The vulnerability of the generate_loadvar() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the generateloadvar function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor, and a resource management error vulnerability exists in versions prior to Vim 9.0.0225, which stems from a confusion in the directive responsible for freeing memory in findvaralsoinscript. An attacker could use this vulnerability to potentially crash the...