7.3
High
CVE-2022-4141 Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used…
Description
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vim/vim 9.0 | earliest → < 9.0.0947 | 9.0.0947 |
References
- huntr.dev huntr.dev
- github.com github.com
- FEDORA-2022-1e14f3ae45 lists.fedoraproject.org
- FEDORA-2022-fc4c513d06 lists.fedoraproject.org
- GLSA-202305-16 security.gentoo.org
- [debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of vim/vim
The 159 CVEs of vim/vim →
CVE-2023-5535
Use After Free in GitHub repository vim/vim prior to v9.0.2010
7.8
High
CVE-2023-5441
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960
6.2
Medium
CVE-2023-5344
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969
4.0
Medium
CVE-2023-4781
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873
7.8
High