Every CVE Search/ Get API key

CVE-2023-2426

Use of Out-of-range Pointer Offset in vim/vim

6.8 MediumFix available

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.41%Up 0.4 points since Apr 30, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.8

Use of Out-of-range Pointer Offset in vim/vim

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
CVE-2023-2426
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-823
Updated
2026-11-02
EUVDEUVD-2023-33915 6.8

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
EUVD-2023-33915
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-732j-vmpr-mg9v 6.8

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
GHSA-732j-vmpr-mg9v
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-823
Updated
2026-11-02
NVD 5.3

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
CVE-2023-2426
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-823
Updated
2026-11-02
OSVAZL-26394 5.5

CVE-2023-2426 affecting package vim for versions less than 9.0.1562-1

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
AZL-26394
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-2426 5.3
Record
BELL-CVE-2023-2426
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
Show 10 moreShow less
OSV 6.8

Use of Out-of-range Pointer Offset in vim/vim

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
CVE-2023-2426
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-823
Updated
2026-11-02
OSVDEBIAN-CVE-2023-2426 5.3

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
DEBIAN-CVE-2023-2426
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1278 6.8

vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.(CVE-2023-2426)

Record
OESA-2023-1278
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2023-2426 5.3

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Record
UBUNTU-CVE-2023-2426
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0
6.8 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVMGASA-2023-0192 No score

Updated vim packages fix security vulnerability

Use of Out-of-range Pointer Offset in GitHub repository vim/vim. (CVE-2023-2426)

Record
MGASA-2023-0192
Updated
2026-11-02
OSVopenSUSE-SU-2024:12905-1 No score

gvim-9.0.1504-1.1 on GA media

These are all security issues fixed in the gvim-9.0.1504-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12905-1
Updated
2026-11-02
OSVSUSE-SU-2023:2640-1 No score

Security update for vim

This update for vim fixes the following issues:

  • CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
  • CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
  • CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).
Record
SUSE-SU-2023:2640-1
Updated
2026-11-02
OSVSUSE-SU-2023:3463-1 No score

Security update for vim

This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1572.

  • CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996).
  • CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256).
  • CVE-2023-2610: Fixed nteger Overflow or Wraparound (bsc#1211257).
  • CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
  • CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
  • CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).
Record
SUSE-SU-2023:3463-1
Updated
2026-11-02
OSVSUSE-SU-2023:3497-1 No score

Security update for vim

This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1572.

  • CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996).
  • CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256).
  • CVE-2023-2610: Fixed nteger Overflow or Wraparound (bsc#1211257).
Record
SUSE-SU-2023:3497-1
Updated
2026-11-02
OSVUSN-6154-1 No score

vim vulnerabilities

It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-2426)

It was discovered that Vim was not properly performing bounds checks when processing register contents, which could lead to a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-2609)

It was discovered that Vim was not properly limiting the length of substitution expression strings, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-2610)

Record
USN-6154-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Azure Linux:2
 before 9.0.1562-1
9.0.1562-1
vim
Alpaquita:23
 9.0.0999-r0 up to 9.1.0936-r0
9.1.0936-r0
vim
Debian:12
 before 2:9.0.1378-2
2:9.0.1378-2
vim
Debian:13
 before 2:9.0.1378-2
2:9.0.1378-2
vim
Debian:14
 before 2:9.0.1378-2
2:9.0.1378-2
vim
Mageia:8
 before 9.0.1572-1.mga8
9.0.1572-1.mga8
vim
openEuler:20.03-LTS-SP1
 before 9.0-13.oe1
9.0-13.oe1
vim
openEuler:20.03-LTS-SP3
 before 9.0-13.oe1
9.0-13.oe1
vim
openEuler:22.03-LTS
 before 9.0-14.oe2203sp1
9.0-14.oe2203sp1
vim
openEuler:22.03-LTS-SP1
 before 9.0-14.oe2203sp1
9.0-14.oe2203sp1
Show 37 moreShow less
Affected packages
PackageAffectedFixed
vim
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
openSUSE:Leap Micro 5.3
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
openSUSE:Leap Micro 5.4
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 9.0.1572-150000.5.46.1
9.0.1572-150000.5.46.1
vim
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 6 CVEs
 before 9.0.1572-17.18.1
9.0.1572-17.18.1
vim
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 6 CVEs
 before 9.0.1572-17.18.1
9.0.1572-17.18.1
vim
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 6 CVEs
 before 9.0.1572-17.18.1
9.0.1572-17.18.1
vim
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 3 CVEs
 before 9.0.1632-150500.20.3.1
9.0.1632-150500.20.3.1
vim
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 3 CVEs
 before 9.0.1632-150500.20.3.1
9.0.1632-150500.20.3.1
vim
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 9.0.1632-150500.20.3.1
9.0.1632-150500.20.3.1
vim
Ubuntu:22.04:LTS
 before 2:8.2.3995-1ubuntu2.8, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 8 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.32:8.2.3995-1ubuntu2.42:8.2.3995-1ubuntu2.52:8.2.3995-1ubuntu2.7
2:8.2.3995-1ubuntu2.8
vim
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 2:7.4.052-1ubuntu3.1+esm10, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 8 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm62:7.4.052-1ubuntu3.1+esm72:7.4.052-1ubuntu3.1+esm82:7.4.052-1ubuntu3.1+esm9
2:7.4.052-1ubuntu3.1+esm10
vim
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 2:7.4.1689-3ubuntu1.5+esm18, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 22 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm152:7.4.1689-3ubuntu1.5+esm17
2:7.4.1689-3ubuntu1.5+esm18
vim
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 2:8.0.1453-1ubuntu1.13+esm1, plus listed versions
2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3
Show 12 moreShow less
2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.102:8.0.1453-1ubuntu1.112:8.0.1453-1ubuntu1.122:8.0.1453-1ubuntu1.13
2:8.0.1453-1ubuntu1.13+esm1
vim
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 2:8.1.2269-1ubuntu5.15, plus listed versions
2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4
Show 11 moreShow less
2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.112:8.1.2269-1ubuntu5.122:8.1.2269-1ubuntu5.132:8.1.2269-1ubuntu5.14
2:8.1.2269-1ubuntu5.15
vim
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 2:8.2.3995-1ubuntu2.8, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 8 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.32:8.2.3995-1ubuntu2.42:8.2.3995-1ubuntu2.52:8.2.3995-1ubuntu2.7
2:8.2.3995-1ubuntu2.8
vim
openSUSE:Tumbleweed
 before 9.0.1504-1.1
9.0.1504-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-2426 is a medium vulnerability (CVSS 6.8) in Vim, published April 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in vim 9.0.1562-1.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open