CVE-2022-0554

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.

CVE-2022-1619

Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution

CVE-2023-5535

Use After Free in GitHub repository vim/vim prior to v9.0.2010.

CVE-2022-1785

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

CVE-2022-0156

vim is vulnerable to Use After Free

CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-3491

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

CVE-2019-20079

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-2345

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

CVE-2022-0319

Out-of-bounds Read in vim/vim prior to 8.2.

CVE-2022-3352

Use After Free in GitHub repository vim/vim prior to 9.0.0614.

CVE-2023-5441

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

CVE-2021-3968

vim is vulnerable to Heap-based Buffer Overflow

CVE-2022-1420

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

CVE-2022-1674

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.

CVE-2022-1898

Use After Free in GitHub repository vim/vim prior to 8.2.

CVE-2022-2980

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

CVE-2022-1160

heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-1735

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.

CVE-2022-2208

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.

CVE-2022-3037

Use After Free in GitHub repository vim/vim prior to 9.0.0322.

CVE-2022-3134

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

CVE-2022-4293

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

CVE-2022-1720

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

CVE-2022-2206

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-1796

Use After Free in GitHub repository vim/vim prior to 8.2.4979.

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow

CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2126

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2023-48231

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version 9.0....

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow

CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_too_large. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in com...

CVE-2022-2982

Use After Free in GitHub repository vim/vim prior to 9.0.0260.

CVE-2022-47024

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able ...

CVE-2017-6349

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

CVE-2022-2210

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-0407

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2017-11109

Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance.

CVE-2022-3153

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

CVE-2017-6350

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.

CVE-2022-1771

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.

CVE-2023-1170

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

CVE-2022-1769

Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

CVE-2022-2124

Buffer Over-read in GitHub repository vim/vim prior to 8.2.