CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow

• CVE-2022-0158: fix Vim9 reading before start of line with single $
• CVE-2022-0696: fix crash when switching tabpage in cmdline window
• CVE-2022-1674: fix crash when matching buffer with invalid pattern
• CVE-2022-1725: fix using NULL regexp program in buffer matching
• CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth
• CVE-2022-2208: fix crash when deleting buffers in diff mode
• CVE-2022-2598: fix invalid memory access in diff mode with dp and undo
• CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code
• CVE-2022-2923: fix crash with mkspell on empty dictionary file
• CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized

• CVE-2022-0158: fix Vim9 reading before start of line with single $
• CVE-2022-0696: fix crash when switching tabpage in cmdline window
• CVE-2022-1674: fix crash when matching buffer with invalid pattern
• CVE-2022-1725: fix using NULL regexp program in buffer matching
• CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth
• CVE-2022-2208: fix crash when deleting buffers in diff mode
• CVE-2022-2598: fix invalid memory access in diff mode with dp and undo
• CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code
• CVE-2022-2923: fix crash with mkspell on empty dictionary file
• CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized

vim is vulnerable to Out-of-bounds Read (CVE-2022-0128) vim is vulnerable to Use After Free (CVE-2022-0156) vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0158) vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)

It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0128)

It was discovered that Vim did not properly manage memory when freeing allocated memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0156)

It was discovered that Vim contained a heap-based buffer overflow vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0158)

It was discovered that Vim did not properly manage memory when recording and using select mode. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0393)

It was discovered that Vim incorrectly handled certain memory operations during a visual block yank. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0407)

It was discovered that Vim contained a NULL pointer dereference vulnerability when switching tabpages. An attacker could possible use this issue to cause a denial of service. (CVE-2022-0696)