CVE-2022-0368 | BDVDB-2026-168666 Detail
vimvim/vim
Description#
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
- https://huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9
- https://github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa
- https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
- https://security.gentoo.org/glsa/202208-32
- https://support.apple.com/kb/HT213444
- https://support.apple.com/kb/HT213488
- http://seclists.org/fulldisclosure/2022/Oct/41
- http://seclists.org/fulldisclosure/2022/Oct/28
- http://seclists.org/fulldisclosure/2022/Oct/43
- https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.