CVE-2022-0359 | BDVDB-2026-168663 Detail
vimvim/vim
Description#
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Impact#
Per CVSS v3.0: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-122 Heap-based Buffer Overflow
References#
- https://huntr.dev/bounties/a3192d90-4f82-4a67-b7a6-37046cc88def
- https://github.com/vim/vim/commit/85b6747abc15a7a81086db31289cf1b8b17e6cb1
- https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
- https://security.gentoo.org/glsa/202208-32
- https://support.apple.com/kb/HT213444
- https://support.apple.com/kb/HT213488
- http://seclists.org/fulldisclosure/2022/Oct/41
- http://seclists.org/fulldisclosure/2022/Oct/28
- http://seclists.org/fulldisclosure/2022/Oct/43
- https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.