« List of all CVEs

CVE-2021-4019

Heap-based Buffer Overflow in vim/vim

Published: 12/1/2021 Last updated: 11/3/2025 Reserved: 11/25/2021

vim is vulnerable to Heap-based Buffer Overflow

CNA assigner: @huntrdev (c09c270a-b464-47c1-9133-acb35b22c19a) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 7.1 High CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Opam packages affected (1)

conf-vim

Products affected (2)

Product Vendor Version
vim/vim vim EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0
vim/vim vim < 11.6

References (34)