{"id":"CVE-2022-1674","aliases":["AZL-9749","BELL-CVE-2022-1674","CLSA-2022-1669309294","CLSA-2026-1778133583","CLSA-2026-1778140717","DEBIAN-CVE-2022-1674","EUVD-2022-24960","GHSA-rx8p-hg5g-g9hg","MGASA-2022-0203","OESA-2022-1668","UBUNTU-CVE-2022-1674","USN-5723-1","USN-5995-1","openSUSE-SU-2024:12337-1"],"status":"published","title":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","severity":{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01559,"percentile":0.75399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-05-12T00:00:00Z","modified":"2026-11-03T08:00:59Z","fixes":[{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["8.2.5064-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5064-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els33"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els23"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4975-1.mga8"}]}],"bundled":31},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-27.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-27.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-34.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm8"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm13"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.12"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.5"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm13"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm8"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.12"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12"],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.5"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4"],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0453-2.1"}]}],"bundled":84}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/a74ba4a4-7a39-4a22-bde3-d2f8ee07b385","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web","report"]},{"url":"https://github.com/vim/vim/commit/a59f2dfd0cf9ee1a584d3de5b7c2d47648e79060","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-32","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213488","tags":["x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/41","tags":["mailing-list","x_transferred","Mailing List","Release Notes","Third Party Advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/28","tags":["mailing-list","x_transferred","article"]},{"url":"https://security.gentoo.org/glsa/202305-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1674","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U"},{"url":"https://github.com/advisories/GHSA-rx8p-hg5g-g9hg"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-1674","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1669309294","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778133583.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778140717.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1674.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1674","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0203.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29972","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7JBXG3MU6EZWJGJD6UTHHONHGJBYPQQT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UCWG5L6CRQWACGVP7CYGESUB3G6QJ3GS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UURGABNDL77YR5FRQKTFBYNBDQX2KO7Q/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3011","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083924","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1629","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1674","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5723-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5995-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2980","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3153","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-1674","title":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2026-10-08T21:14:07.56Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:38.263045Z"}],"euvd":[{"id":"EUVD-2022-24960","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2026-10-08T21:14:07Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:25.942984Z"}],"ghsa":[{"id":"GHSA-rx8p-hg5g-g9hg","title":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim...","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-13T00:01:12Z","modified":"2026-10-09T00:32:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:12:59.31428Z"}],"nvd":[{"id":"CVE-2022-1674","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T11:15:07.363Z","modified":"2026-10-08T22:17:15.813Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"AZL-9749","title":"CVE-2022-1674 affecting package vim for versions less than 8.2.5064-1","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T11:15:07Z","modified":"2026-04-21T04:35:08.075765Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"BELL-CVE-2022-1674","title":"CVE-2022-1674 does not affect BellSoft software","status":"withdrawn","published":"2022-05-12T11:15:00Z","modified":"2026-01-26T09:50:03.234749Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-1674","title":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T00:00:00Z","modified":"2026-10-28T10:28:47.174653937Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-1674","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T11:15:07.363Z","modified":"2026-11-03T08:00:59.722744754Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1668","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\n\nSecurity Fix(es):\n\nHeap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution.(CVE-2022-1619)\n\nNULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.(CVE-2022-1620)\n\nHeap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution.(CVE-2022-1621)\n\nBuffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution.(CVE-2022-1629)\n\nNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.(CVE-2022-1674)","status":"published","published":"2022-05-23T11:04:56Z","modified":"2026-08-18T01:16:33.140456974Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-1674","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.","status":"published","published":"2022-05-12T11:15:00Z","modified":"2026-02-04T17:51:45.815284Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"CLSA-2022-1669309294","title":"Fix CVE(s): CVE-2022-1674, CVE-2022-1725, CVE-2022-3352","description":"\n   * SECURITY UPDATE: Use After Free in vim\n     - debian/patches/CVE-2022-3352.patch: Disallow deleting the current\n     buffer to avoid using freed memory\n     - CVE-2022-3352\n   * SECURITY UPDATE: Crash when matching buffer with invalid pattern\n     - debian/patches/CVE-2022-1674.patch: Check for NULL regprog\n     - CVE-2022-1674\n   * SECURITY UPDATE: Using NULL regexp program\n     - debian/patches/CVE-2022-1725.patch: Check for regexp program\n     becoming NULL in more places\n     - CVE-2022-1725\n   * Fix: CI crashes when running out of memory, NULL pointer dereference\n     - debian/patches/fix-addstate.patch: Apply 'maxmempattern' also to new\n     regexp engine, check NULL pointers inside addstate() function","status":"published","published":"2022-11-24T17:01:34Z","modified":"2026-06-04T10:04:01.507151Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2026-1778133583","title":"vim: Fix of 10 CVEs","description":"- CVE-2022-0158: fix Vim9 reading before start of line with single $\n- CVE-2022-0696: fix crash when switching tabpage in cmdline window\n- CVE-2022-1674: fix crash when matching buffer with invalid pattern\n- CVE-2022-1725: fix using NULL regexp program in buffer matching\n- CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth\n- CVE-2022-2208: fix crash when deleting buffers in diff mode\n- CVE-2022-2598: fix invalid memory access in diff mode with dp and undo\n- CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code\n- CVE-2022-2923: fix crash with mkspell on empty dictionary file\n- CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized","status":"published","published":"2026-05-07T08:12:56Z","modified":"2026-06-01T00:32:29.564582961Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778140717","title":"vim: Fix of 10 CVEs","description":"- CVE-2022-0158: fix Vim9 reading before start of line with single $\n- CVE-2022-0696: fix crash when switching tabpage in cmdline window\n- CVE-2022-1674: fix crash when matching buffer with invalid pattern\n- CVE-2022-1725: fix using NULL regexp program in buffer matching\n- CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth\n- CVE-2022-2208: fix crash when deleting buffers in diff mode\n- CVE-2022-2598: fix invalid memory access in diff mode with dp and undo\n- CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code\n- CVE-2022-2923: fix crash with mkspell on empty dictionary file\n- CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized","status":"published","published":"2026-05-07T09:19:55Z","modified":"2026-06-01T00:32:02.219660861Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2022-0203","title":"Updated vim packages fix security vulnerability","description":"vim is vulnerable to out of bounds read (CVE-2022-0213)\nHeap-based Buffer Overflow in block_insert() in src/ops.c (CVE-2022-0261)\na heap-based OOB read of size 1 (CVE-2022-0128)\nheap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)\naccess of memory location before start of buffer (CVE-2022-0351)\nheap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)\nStack-based Buffer Overflow in spellsuggest.c (CVE-2022-0408)\nuse after free in src/ex_cmds.c (CVE-2022-0413)\nout-of-bounds read in delete_buff_tail() in getchar.c (CVE-2022-0393)\nheap-based-buffer-overflow in ex_retab() of src/indent.c (CVE-2022-0417)\nheap-use-after-free in enter_buffer() of src/buffer.c (CVE-2022-0443)\nheap overflow in ex_retab() may lead to crash (CVE-2022-0572)\nStack-based Buffer Overflow in vim prior to 8.2. (CVE-2022-0629)\nNULL Pointer Dereference in vim prior to 8.2 (CVE-2022-0696)\nbuffer overflow (CVE-2022-0714)\nUse of Out-of-range Pointer Offset (CVE-2022-0729)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0685)\nUse of Out-of-range Pointer Offset in vim (CVE-2022-0554)\nHeap-based Buffer Overflow occurs in vim (CVE-2022-0943)\nheap buffer overflow in get_one_sourceline (CVE-2022-1160)\nuse after free in utf_ptr2char (CVE-2022-1154)\nglobal heap buffer overflow in skip_range (CVE-2022-1381)\nOut-of-range Pointer Offset (CVE-2022-1420)\nheap-buffer-overflow in append_command of src/ex_docmd.c (CVE-2022-1616)\nheap-buffer-overflow in cmdline_erase_chars of ex_getln.c (CVE-2022-1619)\nNULL Pointer Dereference in vim_regexec_string() of regexp.c (CVE-2022-1620)\nheap buffer overflow (CVE-2022-1621)\nbuffer over-read (CVE-2022-1629)\nNULL pointer dereference in vim_regexec_string() of regexp.c (CVE-2022-1674)\na buffer over-read found in scriptfile.c (CVE-2022-1769)\nHeap-based Buffer Overflow in cindent.c (CVE-2022-1733)\n","status":"published","published":"2022-05-25T18:46:18Z","modified":"2026-04-16T04:40:48.788777154Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12337-1","title":"gvim-9.0.0453-2.1 on GA media","description":"These are all security issues fixed in the gvim-9.0.0453-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:47.347126Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"USN-5723-1","title":"vim vulnerabilities","description":"It was discovered that Vim could be made to crash when searching specially\ncrafted patterns. An attacker could possibly use this to crash Vim and\ncause denial of service. (CVE-2022-1674)\n\nIt was discovered that there existed a NULL pointer dereference in Vim. An\nattacker could possibly use this to crash Vim and cause denial of service.\n(CVE-2022-1725)\n\nIt was discovered that there existed a buffer over-read in Vim when\nsearching specially crafted patterns. An attacker could possibly use this\nto crash Vim and cause denial of service. (CVE-2022-2124)\n\nIt was discovered that there existed a heap buffer overflow in Vim when\nauto-indenting lisp. An attacker could possibly use this to crash Vim and\ncause denial of service. (CVE-2022-2125)\n\nIt was discovered that there existed an out of bounds read in Vim when\nperforming spelling suggestions. An attacker could possibly use this to\ncrash Vim and cause denial of service. (CVE-2022-2126)\n\nIt was discovered that Vim accessed invalid memory when executing specially\ncrafted command line expressions. An attacker could possibly use this to\ncrash Vim, access or modify memory, or execute arbitrary commands.\n(CVE-2022-2175)\n\nIt was discovered that there existed an out-of-bounds read in Vim when\nauto-indenting lisp. An attacker could possibly use this to crash Vim,\naccess or modify memory, or execute arbitrary commands. (CVE-2022-2183)\n\n\nIt was discovered that Vim accessed invalid memory when terminal size\nchanged. An attacker could possibly use this to crash Vim, access or modify\nmemory, or execute arbitrary commands. (CVE-2022-2206)\n\nIt was discovered that there existed a stack buffer overflow in Vim's\nspelldump. An attacker could possibly use this to crash Vim and cause\ndenial of service. (CVE-2022-2304)\n","status":"published","published":"2022-11-14T19:34:02Z","modified":"2026-06-25T13:31:33.058701178Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5995-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nand Ubuntu 22.04 LTS. (CVE-2022-0413, CVE-2022-1629, CVE-2022-1674,\nCVE-2022-1733, CVE-2022-1735, CVE-2022-1785, CVE-2022-1796, CVE-2022-1851,\nCVE-2022-1898, CVE-2022-1942, CVE-2022-1968, CVE-2022-2124, CVE-2022-2125,\nCVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2183, CVE-2022-2206,\nCVE-2022-2304, CVE-2022-2345, CVE-2022-2581)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1720, CVE-2022-2571, CVE-2022-2845, CVE-2022-2849,\nCVE-2022-2923)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1927,\nCVE-2022-2344)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 22.10. (CVE-2022-2946)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-2980)\n","status":"published","published":"2023-04-04T08:58:38Z","modified":"2026-06-29T13:50:52.237717209Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}