7.8
CVSSv3

CVE-2022-0943

Published: 14/03/2022 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim before 8.2.4563.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vim vim

fedoraproject fedora 34

fedoraproject fedora 36

debian debian linux 9.0

debian debian linux 10.0

apple macos

Vendor Advisories

Several security issues were fixed in Vim ...
USN-5613-1 caused a regression in Vim ...
Several security issues were fixed in Vim ...
A flaw was found in vim The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution (CVE-2022-0393) A flaw was found in vim The vulnerability occurs due to stack corruption when looking for spe ...
A heap based out-of-bounds write flaw was found in vim's opsc This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write This vulnerability is capable of crashing software, modify memory, and possible code execution (CVE-2022-0261) A flaw was found in vim The vulnerability occurs due to reading beyon ...
A flaw was found in vim The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution (CVE-2022-0393) A flaw was found in vim The vulnerability occurs due to stack corruption when looking for spe ...
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 82 ...
A flaw was found in vim The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution (CVE-2022-0393) A flaw was found in vim The vulnerability occurs due to stack corruption when looking for spe ...