10370 matches found
CVE-2022-2889
A use-after-free vulnerability was found in Vim in the findvaralsoinscript function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted fil...
Out-of-bound Read
vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. A malicious user is able to cause the application to crash due to a heap-based buffer overflow in function compilelockunlock in vim/src/vim9cmds.c...
CVE-2022-2845
Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...
AZL-10596 CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
DEBIAN-CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
UBUNTU-CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Improper Validation of Specified Quantity in Input in vim/vim
...
Heap-based Buffer Overflow in vim/vim
...
Use After Free in vim/vim
...
NULL Pointer Dereference in vim/vim
...
Use After Free in function vim_vsnprintf_typval
Description Use After Free in function vimvsnprintftypval at vim/src/strings.c:2299. vim version git log commit 9e043181ad51536f23d069e719d6f6b96c4c0ec0 grafted, HEAD - master, tag: v9.0.0226, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/poc4huaf.dat -c...
Vim resource management error vulnerability
Vim is a cross-platform text editor, and a resource management error vulnerability exists in versions prior to Vim 9.0.0225, which stems from a confusion in the directive responsible for freeing memory in findvaralsoinscript. An attacker could use this vulnerability to potentially crash the...
