« List of all CVEs

CVE-2022-1621

Heap buffer overflow in vim_strncpy find_word in vim/vim

Published: 5/9/2022 Last updated: 8/3/2024 Reserved: 5/8/2022

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

CNA assigner: @huntrdev (c09c270a-b464-47c1-9133-acb35b22c19a) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 7.3 High CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H

Opam packages affected (1)

conf-vim

Products affected (1)

Product Vendor Version
vim/vim vim 12.2(2)XK1

References (20)