Search Results (247 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-5953 1 Vim 1 Vim 2025-04-20 N/A
vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
CVE-2017-6349 1 Vim 1 Vim 2025-04-20 N/A
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-6350 1 Vim 1 Vim 2025-04-20 N/A
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2022-3705 4 Debian, Fedoraproject, Netapp and 1 more 4 Debian Linux, Fedora, Active Iq Unified Manager and 1 more 2025-04-15 5 Medium
A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.
CVE-2022-4293 1 Vim 1 Vim 2025-04-14 5.5 Medium
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
CVE-2022-4292 2 Netapp, Vim 2 Ontap Select Deploy Administration Utility, Vim 2025-04-14 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0882.
CVE-2016-1248 3 Debian, Redhat, Vim 3 Debian Linux, Enterprise Linux, Vim 2025-04-12 N/A
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
CVE-2023-0049 2 Fedoraproject, Vim 2 Fedora, Vim 2025-04-09 7.8 High
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
CVE-2023-0051 1 Vim 1 Vim 2025-04-09 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
CVE-2023-0288 1 Vim 1 Vim 2025-04-07 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
CVE-2022-47024 2 Redhat, Vim 2 Enterprise Linux, Vim 2025-04-03 7.8 High
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
CVE-2023-0433 1 Vim 1 Vim 2025-04-02 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
CVE-2023-0512 1 Vim 1 Vim 2025-03-31 7.8 High
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
CVE-2023-1170 1 Vim 1 Vim 2025-03-07 6.6 Medium
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
CVE-2023-1127 2 Fedoraproject, Vim 2 Fedora, Vim 2025-03-07 7.8 High
Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
CVE-2023-1264 2 Fedoraproject, Vim 2 Fedora, Vim 2025-03-06 5.5 Medium
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
CVE-2023-1355 1 Vim 1 Vim 2025-02-27 5.5 Medium
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
CVE-2023-5535 2 Fedoraproject, Vim 2 Fedora, Vim 2025-02-13 7.8 High
Use After Free in GitHub repository vim/vim prior to v9.0.2010.
CVE-2023-5441 2 Fedoraproject, Vim 2 Fedora, Vim 2025-02-13 5.5 Medium
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
CVE-2023-4751 2 Apple, Vim 2 Macos, Vim 2025-02-13 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.