Vim Security Vulnerabilities

CVE-2022-0696

NULL Pointer Dereference in GitHub repository vim/vim prior to...

CVE-2022-0554

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to...

CVE-2021-3796

vim is vulnerable to Use After...

CVE-2022-3352

Use After Free in GitHub repository vim/vim prior to...

CVE-2022-3099

Use After Free in GitHub repository vim/vim prior to...

CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2022-1674

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted...

CVE-2022-1620

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted...

CVE-2022-0443

Use After Free in GitHub repository vim/vim prior to...

CVE-2022-0158

vim is vulnerable to Heap-based Buffer...

CVE-2021-4069

vim is vulnerable to Use After...

CVE-2021-4019

vim is vulnerable to Heap-based Buffer...

CVE-2021-3984

vim is vulnerable to Heap-based Buffer...

CVE-2021-3973

vim is vulnerable to Heap-based Buffer...

CVE-2017-6350

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer...

CVE-2017-6349

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer...

CVE-2017-5953

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer...

CVE-2022-2000

Out-of-bounds Write in GitHub repository vim/vim prior to...

CVE-2022-1720

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote...

CVE-2022-0943

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to...

CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to...

CVE-2022-2124

Buffer Over-read in GitHub repository vim/vim prior to...

CVE-2022-1897

Out-of-bounds Write in GitHub repository vim/vim prior to...

CVE-2022-0685

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to...

CVE-2022-0629

Stack-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2021-4173

vim is vulnerable to Use After...

CVE-2022-2126

Out-of-bounds Read in GitHub repository vim/vim prior to...

CVE-2022-1154

Use after free in utf_ptr2char in GitHub repository vim/vim prior to...

CVE-2022-0714

Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2022-0572

Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer...

CVE-2022-1942

Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2022-1898

Use After Free in GitHub repository vim/vim prior to...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to...

CVE-2022-1621

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...

CVE-2022-1616

Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...

CVE-2022-0261

Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

CVE-2021-4187

vim is vulnerable to Use After...

CVE-2021-4136

vim is vulnerable to Heap-based Buffer...

CVE-2019-12735

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in...

CVE-2021-4193

vim is vulnerable to Out-of-bounds...

CVE-2021-4192

vim is vulnerable to Use After...

CVE-2022-1619

Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote...

CVE-2021-4166

vim is vulnerable to Out-of-bounds...

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

CVE-2021-3236

vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all...

CVE-2023-3896

Divide By Zero in vim/vim from 9.0.1367-1...

CVE-2022-2598

Out-of-bounds Write to API in GitHub repository vim/vim prior to...

CVE-2022-2845

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to...