{"id":"CVE-2022-1154","aliases":["ALPINE-CVE-2022-1154","ALSA-2022:1552","ALSA-2022:5242","AZL-9189","BELL-CVE-2022-1154","CLSA-2022-1649869251","CLSA-2022-1649869286","CLSA-2022-1649869347","DEBIAN-CVE-2022-1154","DLA-3011-1","DLA-3182-1","EUVD-2022-24497","GHSA-wm74-7g5x-vq4x","MGASA-2022-0203","OESA-2022-1656","RHSA-2022:1552","RHSA-2022:5242","RLSA-2022:1552","UBUNTU-CVE-2022-1154","USN-5433-1","USN-5613-1","USN-5613-2","openSUSE-SU-2024:12337-1"],"status":"published","title":"Use after free in utf_ptr2char in vim/vim","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01462,"percentile":0.73814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-03-30T00:00:00Z","modified":"2026-11-03T08:01:57Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["8.2.4708-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-X11","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-common","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-enhanced","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-filesystem","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-minimal","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["8.2.4743-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"vim-X11","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"vim-common","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","fixed_in":["3:7.4.629-5.2.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:8.2.4659-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:8.2.4659-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:8.2.4659-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debugsource","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-filesystem","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-minimal-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-X11-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-common-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debugsource","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-enhanced-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal-debuginfo","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"vim","fixed_in":["2:8.0.1763-16.el8_5.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4708-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4743-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.4659-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.4659-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.4659-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.0197-4+deb9u6"}]}],"versions":["2:8.0.0197-4","2:8.0.0197-4+deb9u1","2:8.0.0197-4+deb9u2","2:8.0.0197-4+deb9u3","2:8.0.0197-4+deb9u4","2:8.0.0197-4+deb9u5"],"bundled":9},{"source":"osv","ecosystem":"Debian:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u3"}]}],"versions":["2:8.1.0875-5","2:8.1.0875-5+deb10u1","2:8.1.0875-5+deb10u2"],"bundled":41},{"source":"osv","ecosystem":"Mageia:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4975-1.mga8"}]}],"bundled":31},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-26.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-26.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-33.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-16.el9_0.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm5"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm4"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.9"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.8"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.1"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm4"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm5"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.9"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.8"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.1"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.9"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0453-2.1"}]}],"bundled":84}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"communications_cloud_native_core_network_exposure_function"},{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web","report"]},{"url":"https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html","tags":["mailing-list","x_transferred","Third Party Advisory","article"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://security.gentoo.org/glsa/202208-32","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://security.gentoo.org/glsa/202305-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1154","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/"},{"url":"https://github.com/advisories/GHSA-wm74-7g5x-vq4x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1154","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1552.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2022-1154","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5242","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0554","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0943","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1154","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1420","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1621","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1629","tags":["report"]},{"url":"https://bugzilla.redhat.com/2058483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064064","tags":["report"]},{"url":"https://bugzilla.redhat.com/2073013","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077734","tags":["report"]},{"url":"https://bugzilla.redhat.com/2083924","tags":["report"]},{"url":"https://bugzilla.redhat.com/2083931","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-5242.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-1154","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1649869251","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1649869286.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1649869347.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1154.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1154","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0203.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29972","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7JBXG3MU6EZWJGJD6UTHHONHGJBYPQQT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UCWG5L6CRQWACGVP7CYGESUB3G6QJ3GS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UURGABNDL77YR5FRQKTFBYNBDQX2KO7Q/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3011","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083924","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1616","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1552","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073013","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1552.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1154","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083931","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5242.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0554","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0943","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1420","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1621","tags":["advisory"]},{"url":"https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1629","tags":["advisory"]},{"url":"https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1552","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1154","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5433-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5613-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5613-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1621","tags":["report"]},{"url":"https://launchpad.net/bugs/1989973","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3153","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-1154","title":"Use after free in utf_ptr2char in vim/vim","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T00:00:00Z","modified":"2024-08-02T23:55:24.251Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:38.263045Z"}],"euvd":[{"id":"EUVD-2022-24497","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T00:00:00Z","modified":"2024-08-02T23:55:24Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:26:02.561344Z"}],"ghsa":[{"id":"GHSA-wm74-7g5x-vq4x","title":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-31T00:00:23Z","modified":"2023-05-12T05:00:19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:54:35.04449Z"}],"nvd":[{"id":"CVE-2022-1154","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T12:15:07.943Z","modified":"2026-06-17T04:21:54.903Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:14.706146Z"}],"osv":[{"id":"ALPINE-CVE-2022-1154","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T12:15:07.943Z","modified":"2026-11-03T07:31:04.122390874Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-9189","title":"CVE-2022-1154 affecting package vim for versions less than 8.2.4743-1","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T12:15:07Z","modified":"2026-04-21T04:34:59.622114Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BELL-CVE-2022-1154","title":"CVE-2022-1154 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:05.601858Z","modified":"2026-01-26T09:46:24.722852Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-1154","title":"Use after free in utf_ptr2char in vim/vim","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T00:00:00Z","modified":"2026-10-28T10:28:27.234625492Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-1154","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T12:15:07.943Z","modified":"2026-11-03T08:01:57.212927373Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1656","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\n\nSecurity Fix(es):\n\nUse after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.(CVE-2022-1154)\n\nUse after free in append_command in GitHub repository vim/vim prior to 8.2. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution(CVE-2022-1616)","status":"published","published":"2022-05-18T11:04:55Z","modified":"2026-08-18T01:16:30.848587376Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:1552","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2024-09-16T07:48:26Z","modified":"2026-06-26T12:22:10.162338143Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5242","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2024-09-16T07:56:51Z","modified":"2026-06-26T12:22:18.212075132Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:1552","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: use after free in utf_ptr2char (CVE-2022-1154)","status":"published","published":"2022-04-26T13:49:40Z","modified":"2026-02-05T06:30:10.370355Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1154","description":"Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.","status":"published","published":"2022-03-30T12:15:00Z","modified":"2026-02-04T04:14:09.703665Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:1552","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: use after free in utf_ptr2char (CVE-2022-1154)","status":"published","published":"2022-04-26T13:49:40Z","modified":"2026-10-29T11:01:46.021920281Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:5242","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\nSecurity Fix(es):\n* vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)\n* vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)\n* vim: Out-of-range Pointer Offset (CVE-2022-1420)\n* vim: heap buffer overflow (CVE-2022-1621)\n* vim: buffer over-read (CVE-2022-1629)\n* vim: use after free in utf_ptr2char (CVE-2022-1154)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-07-01T00:00:00Z","modified":"2026-10-29T11:31:11.505189124Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1649869251","title":"Fix CVE(s): CVE-2022-1154","description":"\n   * SECURITY UPDATE: Using buffer line after it has been freed\n     - debian/patches/CVE-2022-1154.patch: After getting mark get\n       the line again\n     - CVE-2022-1154","status":"published","published":"2022-04-13T17:00:51Z","modified":"2026-06-04T10:03:36.399191Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1649869286","title":"Fixed CVE-2022-1154 in vim","description":"- CVE-2022-1154: fix buffer usage after free","status":"published","published":"2022-04-13T17:01:26Z","modified":"2026-06-01T00:33:24.289503732Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1649869347","title":"Fix of CVE: CVE-2022-1154","description":"- CVE-2022-1154: fix buffer usage after free","status":"published","published":"2022-04-13T17:02:27Z","modified":"2026-06-01T00:33:15.431649169Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-3011-1","title":"vim - security update","status":"published","published":"2022-05-16T00:00:00Z","modified":"2026-03-09T01:22:40.505134Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3182-1","title":"vim - security update","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-03-09T01:23:17.897521Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2022-0203","title":"Updated vim packages fix security vulnerability","description":"vim is vulnerable to out of bounds read (CVE-2022-0213)\nHeap-based Buffer Overflow in block_insert() in src/ops.c (CVE-2022-0261)\na heap-based OOB read of size 1 (CVE-2022-0128)\nheap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)\naccess of memory location before start of buffer (CVE-2022-0351)\nheap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)\nStack-based Buffer Overflow in spellsuggest.c (CVE-2022-0408)\nuse after free in src/ex_cmds.c (CVE-2022-0413)\nout-of-bounds read in delete_buff_tail() in getchar.c (CVE-2022-0393)\nheap-based-buffer-overflow in ex_retab() of src/indent.c (CVE-2022-0417)\nheap-use-after-free in enter_buffer() of src/buffer.c (CVE-2022-0443)\nheap overflow in ex_retab() may lead to crash (CVE-2022-0572)\nStack-based Buffer Overflow in vim prior to 8.2. (CVE-2022-0629)\nNULL Pointer Dereference in vim prior to 8.2 (CVE-2022-0696)\nbuffer overflow (CVE-2022-0714)\nUse of Out-of-range Pointer Offset (CVE-2022-0729)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0685)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0554)\nHeap-based Buffer Overflow occurs in vim (CVE-2022-0943)\nheap buffer overflow in get_one_sourceline (CVE-2022-1160)\nuse after free in utf_ptr2char (CVE-2022-1154)\nglobal heap buffer overflow in skip_range (CVE-2022-1381)\nOut-of-range Pointer Offset (CVE-2022-1420)\nheap-buffer-overflow in append_command of src/ex_docmd.c (CVE-2022-1616)\nheap-buffer-overflow in cmdline_erase_chars of ex_getln.c (CVE-2022-1619)\nNULL Pointer Dereference in vim_regexec_string() of regexp.c (CVE-2022-1620)\nheap buffer overflow (CVE-2022-1621)\nbuffer over-read (CVE-2022-1629)\nNULL pointer dereference in vim_regexec_string() of regexp.c (CVE-2022-1674)\na buffer over-read found in scriptfile.c (CVE-2022-1769)\nHeap-based Buffer Overflow in cindent.c (CVE-2022-1733)\n","status":"published","published":"2022-05-25T18:46:18Z","modified":"2026-04-16T04:40:48.788777154Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12337-1","title":"gvim-9.0.0453-2.1 on GA media","description":"These are all security issues fixed in the gvim-9.0.0453-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:47.347126Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"USN-5433-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled parsing of filenames in its\nsearch functionality. If a user were tricked into opening a specially crafted\nfile, an attacker could crash the application, leading to a denial of\nservice. (CVE-2021-3973)\n\nIt was discovered that Vim incorrectly handled memory when opening and\nsearching the contents of certain files. If a user were tricked into opening\na specially crafted file, an attacker could crash the application, leading to\na denial of service, or possibly achieve code execution with user privileges.\n(CVE-2021-3974)\n\nIt was discovered that Vim incorrectly handled memory when opening and editing\ncertain files. If a user were tricked into opening a specially crafted file,\nan attacker could crash the application, leading to a denial of service, or\npossibly achieve code execution with user privileges. (CVE-2021-3984,\nCVE-2021-4019, CVE-2021-4069)\n\nIt was discovered that Vim was using freed memory when dealing with regular\nexpressions inside a visual selection. If a user were tricked into opening a\nspecially crafted file, an attacker could crash the application, leading to a\ndenial of service, or possibly achieve code execution with user privileges.\n(CVE-2021-4192)\n\nIt was discovered that Vim was incorrectly performing read and write\noperations when in visual block mode, going beyond the end of a line and\ncausing a heap buffer overflow. If a user were tricked into opening a\nspecially crafted file, an attacker could crash the application, leading to a\ndenial of service, or possibly achieve code execution with user privileges.\n(CVE-2022-0261, CVE-2022-0318)\n\nIt was discovered that Vim was using freed memory when dealing with regular\nexpressions through its old regular expression engine. If a user were tricked\ninto opening a specially crafted file, an attacker could crash the application,\nleading to a denial of service, or possibly achieve code execution with user\nprivileges. (CVE-2022-1154)\n","status":"published","published":"2022-05-23T11:39:44Z","modified":"2026-06-25T13:31:11.735914829Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5613-1","title":"vim vulnerabilities","description":"It was discovered that Vim was not properly performing bounds checks\nwhen executing spell suggestion commands. An attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code.\n(CVE-2022-0943)\n\nIt was discovered that Vim was using freed memory when dealing with\nregular expressions through its old regular expression engine. If a user\nwere tricked into opening a specially crafted file, an attacker could\ncrash the application, leading to a denial of service, or possibly achieve\ncode execution. (CVE-2022-1154)\n\nIt was discovered that Vim was not properly performing checks on name of\nlambda functions. An attacker could possibly use this issue to cause a\ndenial of service. This issue affected only Ubuntu 22.04 LTS.\n(CVE-2022-1420)\n\nIt was discovered that Vim was incorrectly performing bounds checks\nwhen processing invalid commands with composing characters in Ex\nmode. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. (CVE-2022-1616)\n\nIt was discovered that Vim was not properly processing latin1 data\nwhen issuing Ex commands. An attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code. (CVE-2022-1619)\n\nIt was discovered that Vim was not properly performing memory\nmanagement when dealing with invalid regular expression patterns in\nbuffers. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2022-1620)\n\nIt was discovered that Vim was not properly processing invalid bytes\nwhen performing spell check operations. An attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code.\n(CVE-2022-1621)\n","status":"published","published":"2022-09-15T11:04:50Z","modified":"2026-06-29T13:49:42.114369961Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5613-2","title":"vim regression","description":"USN-5613-1 fixed vulnerabilities in Vim. Unfortunately that update failed\nto include binary packages for some architectures. This update fixes that\nregression.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that Vim was not properly performing bounds checks\n when executing spell suggestion commands. An attacker could possibly use\n this issue to cause a denial of service or execute arbitrary code.\n (CVE-2022-0943)\n \n It was discovered that Vim was using freed memory when dealing with\n regular expressions through its old regular expression engine. If a user\n were tricked into opening a specially crafted file, an attacker could\n crash the application, leading to a denial of service, or possibly achieve\n code execution. (CVE-2022-1154)\n \n It was discovered that Vim was not properly performing checks on name of\n lambda functions. An attacker could possibly use this issue to cause a\n denial of service. This issue affected only Ubuntu 22.04 LTS.\n (CVE-2022-1420)\n \n It was discovered that Vim was incorrectly performing bounds checks\n when processing invalid commands with composing characters in Ex\n mode. An attacker could possibly use this issue to cause a denial of\n service or execute arbitrary code. (CVE-2022-1616)\n \n It was discovered that Vim was not properly processing latin1 data\n when issuing Ex commands. An attacker could possibly use this issue to\n cause a denial of service or execute arbitrary code. (CVE-2022-1619)\n \n It was discovered that Vim was not properly performing memory\n management when dealing with invalid regular expression patterns in\n buffers. An attacker could possibly use this issue to cause a denial of\n service. (CVE-2022-1620)\n \n It was discovered that Vim was not properly processing invalid bytes\n when performing spell check operations. An attacker could possibly use\n this issue to cause a denial of service or execute arbitrary code.\n (CVE-2022-1621)\n","status":"published","published":"2022-09-19T12:53:35Z","modified":"2026-02-10T04:42:46Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}