Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 31

Export CSV
CVE-2022-4141

Heap-based Buffer Overflow in vim/vim

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Neovim and 1 more
Products
Debian Linux Fedora Neovim and 1 more
CVE-2022-3591

Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Neovim Vim
Products
Neovim Vim
CVE-2023-4734

Integer Overflow or Wraparound in vim/vim

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Neovim Vim
Products
Macos Neovim Vim
CVE-2024-41965

Vim < v9.1.0648 has a double-free in dialog_changed()

Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a name yet. However, when setting the buffer name to Unnamed, Vim will falsely free a pointer twice, leading to a double-free and possibly later to a heap-use-after-free, which can lead to a crash. The issue has been fixed as of Vim patch v9.1.0648.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Neovim Netapp Vim
Products
Neovim Hci Compute Node Vim
CVE-2023-48706

Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Neovim Netapp and 1 more
Products
Fedora Neovim Hci Compute Node and 1 more