Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...

Information Disclosure

vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...

Use-After-Free

vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...

CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1796 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1898 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1771 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1851 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1851 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1769 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1769 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1735 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1735 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2206

CVE-2022-2206 is an Out-of-bounds Read in vim/vim prior to 8.2. Connected advisories (e.g., Astra Linux security bulletin and ALAS entries) confirm Vim’s memory access flaw causing potential crash or memory disclosure when opening crafted files. The vulnerability affects Vim across Linux distribu...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a boundary error in the msgouttransattr function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2206 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Heap-based buffer overflow in function ins_bs

Description Heap-based buffer overflow in function insbs at edit.c:4187 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung/vim2/src$ valgrind ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/guest/trung/poc/poc24 -c :qa! ==5251== Memchec...

Null pointer dereference in function diff_check

Description Null pointer dereference in function diffcheck at diff.c:1923 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung/vim2/src$ valgrind ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/guest/trung/poc/poc22 -c :qa! ==4357==...