vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

An out-of-bounds write flaw was found in vim's drawscreen.c winredrstatus function. This flaw allows an attacker to trick a user to open a crafted file with specific arguments in vim, triggering an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, a...

vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

A flaw was found in vim. A possible heap-based buffer overflow allows an attacker to input a specially crafted file, leading to a crash or code execution. The highest threat from this vulnerability is confidentiality, integrity, and system availability...

vim: heap-based buffer overflow in find_help_tags() in help.c

A flaw was found in vim. A possible heap-based buffer overflow vulnerability allows an attacker to input a specially crafted file, leading to a crash or code execution. The highest threat from this vulnerability is system availability...

vim: use-after-free in win_linetabsize()

It was found that vim was vulnerable to use-after-free flaw in winlinetabsize. Sourcing a specially crafted file in vim could crash the vim process or possibly lead to other undefined behaviors...

vim: out-of-bound read in getvcol()

It was found that vim was vulnerable to an out-of-bound read flaw in getvcol. A specially crafted file could be used to, when opened in vim, disclose some of the process's internal memory...

RLSA-2022:0366 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...

ALSA-2022:0366 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...

vim security update

An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when C-indenting CVE-2021-3984 vim: heap-based buffer overflow in...

CVE-2022-0393

A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

CVE-2022-0392

A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s script...

AZL-8461 CVE-2022-0417 affecting package vim for versions less than 8.2.4743-1

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

Heap overflow

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

CVE-2022-0407

A flaw was found in vim. The vulnerability occurs due to the read operation before the start of the line and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are...

CVE-2022-0417

CVE-2022-0417 is a heap-based buffer overflow in Vim (vim/vim) prior to 8.2.4743-1. Multiple connected advisories confirm a risk of crash or code execution when processing crafted input. Affected packages include Vim across various platforms (Ubuntu, Amazon Linux, Cloud Foundry advisories; Astra ...