Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds read allowing an attacker to crash the system with a maliciously string constant...

CVE-2022-2304 affecting package vim 8.2.5172-1

CVE-2022-2304 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2287 affecting package vim 8.2.5172-1

CVE-2022-2287 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2284 affecting package vim 8.2.5172-1

CVE-2022-2284 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2344 affecting package vim 8.2.5172-1

CVE-2022-2344 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2289 affecting package vim 8.2.5172-1

CVE-2022-2289 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2285 affecting package vim 8.2.5172-1

CVE-2022-2285 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2257 affecting package vim 8.2.5172-1

CVE-2022-2257 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2264 affecting package vim 8.2.5172-1

CVE-2022-2264 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2343 affecting package vim 8.2.5172-1

CVE-2022-2343 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2286 affecting package vim 8.2.5172-1

CVE-2022-2286 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2288 affecting package vim 8.2.5172-1

CVE-2022-2288 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

Heap-based Buffer Overflow in function compile_lock_unlock in vim/vim

Description Heap-based Buffer Overflow in function compilelockunlock at vim/src/vim9cmds.c:196 vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S poc2hboM.dat -c :qa!...

Buffer Over-read

vim is vulnerable to buffer over-reads. Vulnerability exists in over-read in putoncmdline function in exgetln.c to cause a buffer over-read that can crash the application or disclose sensitive information in the buffer...

Use After Free in function string_quote

Description Use After Free in function stringquote at vim/src/strings.c:777 vim version git log commit c9b6570fab46bf2c246a954cfb8c0d95fe2746b3 grafted, HEAD - master, tag: v9.0.0203, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc1uaf.da...

Out-of-bounds read in function check_vim9_unlet in vim/vim

Description Out-of-bounds read in function checkvim9unlet at vim/src/vim9cmds.c:95 Vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/hbo1min.dat -c :q...

Use-After-Free

vim/vim is vulnerable to use-after-free. The vulnerability exists in skipwhite which allows an attacker to cause a memory exhaustion leading to an application crash...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Out-of-bounds Read allowing an attacker to crash the system with a maliciously crafted string constant...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Undefined Behavior allowing an attacker to crash the system via a maliciously crafted Input to API...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...