Heap-based Buffer Overflow

vim/vim is vulnerable to heap-based buffer overflow. The vulnerability exists in insexpand.c because it reads past end of completion with a long line and 'infercase' which allows an attacker to cause a buffer overflow...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in eval.c which allows an attacker to cause an application crash...

Out-of-Bounds Read

vim is vulnerable to out-of-bound reads. Vulnerability exists in the msgouttransspecial function in message.c to cause an out-of-bounds read that can crash the application...

Out-of-bounds Write

vim is vulnerable to out-of-bounds write. The vulnerability exists due to invalid memory access after diff buffer manipulations in 1diffmarkadjusttp function in diff.c...

Heap-based Buffer Overflow

vim is vulnerable to a heap buffer overflow. The vulnerability exists in parsecmdaddress in function utfptr2char due to a lack of input validation which allows an attacker to inject malicious and crash the system...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds read allowing an attacker to crash the system with a maliciously string constant...

CVE-2022-2288 affecting package vim 8.2.5172-1

CVE-2022-2288 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2286 affecting package vim 8.2.5172-1

CVE-2022-2286 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2285 affecting package vim 8.2.5172-1

CVE-2022-2285 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2289 affecting package vim 8.2.5172-1

CVE-2022-2289 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2284 affecting package vim 8.2.5172-1

CVE-2022-2284 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2304 affecting package vim 8.2.5172-1

CVE-2022-2304 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2287 affecting package vim 8.2.5172-1

CVE-2022-2287 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2343 affecting package vim 8.2.5172-1

CVE-2022-2343 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2264 affecting package vim 8.2.5172-1

CVE-2022-2264 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2257 affecting package vim 8.2.5172-1

CVE-2022-2257 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2344 affecting package vim 8.2.5172-1

CVE-2022-2344 affecting package vim 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

Heap-based Buffer Overflow in function compile_lock_unlock in vim/vim

Description Heap-based Buffer Overflow in function compilelockunlock at vim/src/vim9cmds.c:196 vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S poc2hboM.dat -c :qa!...

Buffer Over-read

vim is vulnerable to buffer over-reads. Vulnerability exists in over-read in putoncmdline function in exgetln.c to cause a buffer over-read that can crash the application or disclose sensitive information in the buffer...