Vim Vim

  1. Vendors
  2. Vim
  3. Vim
Do you want an email whenever new security vulnerabilities are reported in Vim?

By the Year

In 2023 there have been 12 vulnerabilities in Vim with an average score of 7.4 out of ten. Last year Vim had 113 security vulnerabilities published. Right now, Vim is on track to have less security vulnerabilities in 2023 than it did last year. Last year, the average CVE base score was greater by 0.07

Year Vulnerabilities Average Score
2023 12 7.38
2022 113 7.45
2021 20 7.52
2020 1 5.30
2019 2 8.20
2018 0 0.00

It may take a day or so for new Vim vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Vim Security Vulnerabilities

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

CVE-2023-1355 7.5 - High - March 11, 2023

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

NULL Pointer Dereference

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

CVE-2023-1264 5.5 - Medium - March 07, 2023

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

NULL Pointer Dereference

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

CVE-2023-1175 6.6 - Medium - March 04, 2023

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

Incorrect Calculation of Buffer Size

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

CVE-2023-1170 6.6 - Medium - March 03, 2023

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

Heap-based Buffer Overflow

Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.

CVE-2023-1127 7.8 - High - March 01, 2023

Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.

Divide By Zero

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

CVE-2023-0512 7.8 - High - January 30, 2023

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

Divide By Zero

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVE-2023-0433 7.8 - High - January 21, 2023

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Heap-based Buffer Overflow

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339

CVE-2022-47024 7.8 - High - January 20, 2023

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.

NULL Pointer Dereference

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

CVE-2023-0288 7.8 - High - January 13, 2023

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

Heap-based Buffer Overflow

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.

CVE-2023-0054 7.8 - High - January 04, 2023

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.

Memory Corruption

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

CVE-2023-0051 7.8 - High - January 04, 2023

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Heap-based Buffer Overflow

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

CVE-2023-0049 7.8 - High - January 04, 2023

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Out-of-bounds Read

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

CVE-2022-4293 5.5 - Medium - December 05, 2022

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

Floating Point Comparison with Incorrect Operator

Use After Free in GitHub repository vim/vim prior to 9.0.0882.

CVE-2022-4292 7.8 - High - December 05, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0882.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.

CVE-2022-3491 7.8 - High - December 03, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.

Memory Corruption

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.

CVE-2022-3520 9.8 - Critical - December 02, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.

Memory Corruption

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

CVE-2022-3591 7.8 - High - December 02, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

Dangling pointer

Heap based buffer overflow in vim/vim 9.0.0946 and below by

CVE-2022-4141 7.8 - High - November 25, 2022

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

Memory Corruption

A vulnerability was found in vim and classified as problematic

CVE-2022-3705 7.5 - High - October 26, 2022

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

Buffer Overflow

Use After Free in GitHub repository vim/vim prior to 9.0.0614.

CVE-2022-3352 7.8 - High - September 29, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0614.

Dangling pointer

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.

CVE-2022-1725 5.5 - Medium - September 29, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.

NULL Pointer Dereference

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

CVE-2022-3324 7.8 - High - September 27, 2022

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

Stack Overflow

Use After Free in GitHub repository vim/vim prior to 9.0.0579.

CVE-2022-3297 7.8 - High - September 25, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0579.

Dangling pointer

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.

CVE-2022-3296 7.8 - High - September 25, 2022

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.

Memory Corruption

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

CVE-2022-3278 5.5 - Medium - September 23, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

NULL Pointer Dereference

Use After Free in GitHub repository vim/vim prior to 9.0.0530.

CVE-2022-3256 7.8 - High - September 22, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0530.

Dangling pointer

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

CVE-2022-3235 7.8 - High - September 18, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

CVE-2022-3234 7.8 - High - September 17, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

Heap-based Buffer Overflow

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

CVE-2022-3153 5.5 - Medium - September 08, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

NULL Pointer Dereference

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

CVE-2022-3134 7.8 - High - September 06, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

Dangling pointer

Use After Free in GitHub repository vim/vim prior to 9.0.0360.

CVE-2022-3099 7.8 - High - September 03, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0360.

Dangling pointer

Use After Free in GitHub repository vim/vim prior to 9.0.0322.

CVE-2022-3037 7.8 - High - August 30, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0322.

Dangling pointer

Use After Free in GitHub repository vim/vim prior to 9.0.0286.

CVE-2022-3016 7.8 - High - August 28, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0286.

Dangling pointer

Use After Free in GitHub repository vim/vim prior to 9.0.0260.

CVE-2022-2982 7.8 - High - August 25, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0260.

Dangling pointer

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

CVE-2022-2980 5.5 - Medium - August 25, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

NULL Pointer Dereference

Use After Free in GitHub repository vim/vim prior to 9.0.0246.

CVE-2022-2946 7.8 - High - August 23, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0246.

Dangling pointer

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

CVE-2022-2923 5.5 - Medium - August 22, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

NULL Pointer Dereference

Use After Free in GitHub repository vim/vim prior to 9.0.0225.

CVE-2022-2889 7.8 - High - August 19, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0225.

Dangling pointer

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.

CVE-2022-2874 5.5 - Medium - August 18, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.

NULL Pointer Dereference

Use After Free in GitHub repository vim/vim prior to 9.0.0221.

CVE-2022-2862 7.8 - High - August 17, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0221.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

CVE-2022-2849 7.8 - High - August 17, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

Heap-based Buffer Overflow

Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218.

CVE-2022-2845 7.8 - High - August 17, 2022

Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218.

Buffer Over-read

Use After Free in GitHub repository vim/vim prior to 9.0.0213.

CVE-2022-2817 7.8 - High - August 15, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0213.

Dangling pointer

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.

CVE-2022-2816 7.8 - High - August 15, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.

Out-of-bounds Read

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.

CVE-2022-2819 7.8 - High - August 15, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.

Heap-based Buffer Overflow

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.

CVE-2022-2581 7.8 - High - August 01, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.

Out-of-bounds Read

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

CVE-2022-2580 7.8 - High - August 01, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.

CVE-2022-2571 7.8 - High - August 01, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.

Heap-based Buffer Overflow

Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100.

CVE-2022-2598 5.5 - Medium - August 01, 2022

Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

CVE-2022-2522 7.8 - High - July 25, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

Heap-based Buffer Overflow

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

CVE-2022-2345 7.8 - High - July 08, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

CVE-2022-2344 7.8 - High - July 08, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

Memory Corruption

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

CVE-2022-2343 7.8 - High - July 08, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

Heap-based Buffer Overflow

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

CVE-2022-2304 7.8 - High - July 05, 2022

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

Memory Corruption

Use After Free in GitHub repository vim/vim prior to 9.0.

CVE-2022-2289 7.8 - High - July 03, 2022

Use After Free in GitHub repository vim/vim prior to 9.0.

Dangling pointer

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

CVE-2022-2288 7.8 - High - July 03, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

Memory Corruption

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

CVE-2022-2287 7.1 - High - July 02, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Read

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

CVE-2022-2286 7.8 - High - July 02, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Read

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

CVE-2022-2285 7.8 - High - July 02, 2022

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

Integer Overflow or Wraparound

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

CVE-2022-2284 7.8 - High - July 02, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

CVE-2022-2264 7.8 - High - July 01, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

Heap-based Buffer Overflow

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

CVE-2022-2257 7.8 - High - June 30, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Read

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

CVE-2022-2231 5.5 - Medium - June 28, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

NULL Pointer Dereference

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-2210 7.8 - High - June 27, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Memory Corruption

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.

CVE-2022-2208 5.5 - Medium - June 27, 2022

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.

NULL Pointer Dereference

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-2207 7.8 - High - June 27, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2206 7.8 - High - June 26, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2183 7.8 - High - June 23, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-2182 7.8 - High - June 23, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2175 7.8 - High - June 23, 2022

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Buffer Over-read

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956

CVE-2022-1720 7.8 - High - June 20, 2022

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Buffer Over-read

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-2129 7.8 - High - June 19, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Memory Corruption

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2126 7.8 - High - June 19, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-2125 7.8 - High - June 19, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Memory Corruption

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

CVE-2022-2124 7.8 - High - June 19, 2022

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read

Use After Free in GitHub repository vim/vim prior to 8.2.

CVE-2022-2042 7.8 - High - June 10, 2022

Use After Free in GitHub repository vim/vim prior to 8.2.

Dangling pointer

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-2000 7.8 - High - June 09, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Memory Corruption

Use After Free in GitHub repository vim/vim prior to 8.2.

CVE-2022-1968 7.8 - High - June 02, 2022

Use After Free in GitHub repository vim/vim prior to 8.2.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-1942 7.8 - High - May 31, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

CVE-2022-1927 7.8 - High - May 29, 2022

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Buffer Over-read

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVE-2022-1897 7.8 - High - May 27, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Memory Corruption

Use After Free in GitHub repository vim/vim prior to 8.2.

CVE-2022-1898 7.8 - High - May 27, 2022

Use After Free in GitHub repository vim/vim prior to 8.2.

Dangling pointer

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVE-2022-1886 7.8 - High - May 26, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVE-2022-1851 7.8 - High - May 25, 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read

Use After Free in GitHub repository vim/vim prior to 8.2.4979.

CVE-2022-1796 7.8 - High - May 19, 2022

Use After Free in GitHub repository vim/vim prior to 8.2.4979.

Dangling pointer

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

CVE-2022-1785 7.8 - High - May 19, 2022

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

Memory Corruption

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.

CVE-2022-1771 5.5 - Medium - May 18, 2022

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.

Stack Exhaustion

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.

CVE-2022-1735 7.8 - High - May 17, 2022

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.

Classic Buffer Overflow

Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

CVE-2022-1769 7.8 - High - May 17, 2022

Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

Buffer Over-read

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

CVE-2022-1733 7.8 - High - May 17, 2022

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

Memory Corruption

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938

CVE-2022-1674 5.5 - Medium - May 12, 2022

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.

NULL Pointer Dereference

Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925

CVE-2022-1629 7.8 - High - May 10, 2022

Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution

Buffer Over-read

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919

CVE-2022-1621 7.8 - High - May 10, 2022

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

Memory Corruption

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901

CVE-2022-1620 7.5 - High - May 08, 2022

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.

NULL Pointer Dereference

Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899

CVE-2022-1619 7.8 - High - May 08, 2022

Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution

Heap-based Buffer Overflow

Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895

CVE-2022-1616 7.8 - High - May 07, 2022

Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

Dangling pointer

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

CVE-2022-1420 5.5 - Medium - April 21, 2022

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

Untrusted pointer offset

global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763

CVE-2022-1381 7.8 - High - April 18, 2022

global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

Heap-based Buffer Overflow

heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

CVE-2022-1160 7.8 - High - March 30, 2022

heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

Heap-based Buffer Overflow

Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

CVE-2022-1154 7.8 - High - March 30, 2022

Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

Dangling pointer

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Oracle Communications Cloud Native Core Network Exposure Function or by Vim? Click the Watch button to subscribe.

Vim
Vendor

Vim
Product

subscribe