Remote No

Type Arbitrary code execution

Description

vim before version 8.2.3402 is vulnerable to a heap-based buffer overflow when using :retab with large value.

AVG-2364 vim 8.2.3340-1 8.2.3412-1 Medium Fixed

https://bugzilla.redhat.com/show_bug.cgi?id=2001929
https://huntr.dev/bounties/016ad2f2-07c1-4d14-a8ce-6eed10729365/
https://github.com/vim/vim/commit/b7081e135a16091c93f6f5f7525a5c58fb7ca9f9