Vulnerabilities (CVE)

Filtered by vendor Vim Subscribe
Filtered by product Vim
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1154 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2022-07-25 7.5 HIGH 9.8 CRITICAL
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
CVE-2022-2210 2 Fedoraproject, Vim 2 Fedora, Vim 2022-07-07 7.5 HIGH 9.8 CRITICAL
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2207 2 Fedoraproject, Vim 2 Fedora, Vim 2022-07-06 7.5 HIGH 9.8 CRITICAL
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2042 1 Vim 1 Vim 2022-06-17 7.5 HIGH 9.8 CRITICAL
Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1927 2 Fedoraproject, Vim 2 Fedora, Vim 2022-06-08 7.5 HIGH 9.8 CRITICAL
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0318 1 Vim 1 Vim 2022-01-27 7.5 HIGH 9.8 CRITICAL
Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2017-5953 1 Vim 1 Vim 2019-06-11 7.5 HIGH 9.8 CRITICAL
vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
CVE-2017-6350 1 Vim 1 Vim 2018-08-13 7.5 HIGH 9.8 CRITICAL
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-6349 1 Vim 1 Vim 2018-08-13 7.5 HIGH 9.8 CRITICAL
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.