CVE-2022-2286

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2285

Integer Overflow or Wraparound in vim/vim

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Fedoraproject Vim

Products

Debian Linux Fedora Vim

CVE-2022-2284

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2210

Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2208

NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2207

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2206

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2183

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2182

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2175

Buffer Over-read in vim/vim

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2126

Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 1 more

Products

Macos Debian Linux Fedora and 1 more

CVE-2022-2125

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Apple Fedoraproject Vim

Products

Macos Fedora Vim

CVE-2022-2124

Buffer Over-read in vim/vim

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 1 more

Products

Macos Debian Linux Fedora and 1 more

CVE-2021-4166

Out-of-bounds Read in vim/vim

vim is vulnerable to Out-of-bounds Read

CVSS 3.1 · 7.1 High EPSS 1.7% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 4 more

Products

Mac Os X Macos Debian Linux and 5 more

CVE-2021-3974

Use After Free in vim/vim

vim is vulnerable to Use After Free

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Fedoraproject Vim

Products

Debian Linux Fedora Vim

CVE-2021-3927

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Vim

Products

Debian Linux Fedora Vim

CVE-2022-0351

Access of Memory Location Before Start of Buffer in vim/vim

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Apple Debian Vim

Products

Macos Debian Linux Vim

CVE-2022-2129

Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Fedoraproject Vim

Products

Debian Linux Fedora Vim

CVE-2026-73071

Vim: Use-after-free in JSON Decoding

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill and free the current buffer, causing the error path to read freed memory instead of reader->js_buf + reader->js_used when an invalid JSON string spans buffers. This issue is fixed in version 9.2.0844.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Vim

Products

Vim

CVE-2026-73072

Vim: Heap Buffer Overflow when Loading a Spell File

Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Vim

Products

Vim