{"id":"CVE-2022-1886","aliases":["ALPINE-CVE-2022-1886","AZL-9824","BELL-CVE-2022-1886","CLSA-2022-1654804099","CLSA-2022-1654804240","CLSA-2022-1654804579","CLSA-2022-1655317854","CLSA-2025-1761845210","DEBIAN-CVE-2022-1886","EUVD-2022-25158","GHSA-v7h6-whhr-jv6v","MGASA-2022-0223","OESA-2022-1707","UBUNTU-CVE-2022-1886","USN-6557-1","openSUSE-SU-2024:12337-1"],"status":"published","title":"Heap-based Buffer Overflow in vim/vim","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01369,"percentile":0.72082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2022-05-26T00:00:00Z","modified":"2026-11-03T08:02:02Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["8.2.5055-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["8.2.5064-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.0.0135-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.15"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5055-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5064-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els17"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.0135-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5052-1.mga8"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-32.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-32.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-40.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.15"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm15"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm22"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12","2:7.4.1689-3ubuntu1.5+esm13","2:7.4.1689-3ubuntu1.5+esm14","2:7.4.1689-3ubuntu1.5+esm15","2:7.4.1689-3ubuntu1.5+esm17","2:7.4.1689-3ubuntu1.5+esm18","2:7.4.1689-3ubuntu1.5+esm19","2:7.4.1689-3ubuntu1.5+esm20"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+esm7"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11","2:8.0.1453-1ubuntu1.12","2:8.0.1453-1ubuntu1.13","2:8.0.1453-1ubuntu1.13+esm1","2:8.0.1453-1ubuntu1.13+esm3","2:8.0.1453-1ubuntu1.13+esm4","2:8.0.1453-1ubuntu1.13+esm5","2:8.0.1453-1ubuntu1.13+esm6"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.21"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12","2:8.1.2269-1ubuntu5.13","2:8.1.2269-1ubuntu5.14","2:8.1.2269-1ubuntu5.15","2:8.1.2269-1ubuntu5.16","2:8.1.2269-1ubuntu5.17","2:8.1.2269-1ubuntu5.18","2:8.1.2269-1ubuntu5.20"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.15"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13"],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0453-2.1"}]}],"bundled":84}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web","report"]},{"url":"https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-32","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202305-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1886","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/"},{"url":"https://github.com/advisories/GHSA-v7h6-whhr-jv6v"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1886","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-1886","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1654804099","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1654804240.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1654804579.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1655317854","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761845210.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1886.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1886","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0223.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30503","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1707","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1927","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1886","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6557-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-46246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48706","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3153","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-1886","title":"Heap-based Buffer Overflow in vim/vim","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2024-08-03T00:17:00.984Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-25158","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2024-08-03T00:17:00Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:59.967142Z"}],"ghsa":[{"id":"GHSA-v7h6-whhr-jv6v","title":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-27T00:00:46Z","modified":"2023-05-03T12:30:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:54:34.500941Z"}],"nvd":[{"id":"CVE-2022-1886","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T15:15:07.9Z","modified":"2026-06-17T04:23:16.95Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:07:21.261605Z"}],"osv":[{"id":"ALPINE-CVE-2022-1886","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T15:15:07.9Z","modified":"2026-11-03T07:30:16.499327509Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-9824","title":"CVE-2022-1886 affecting package vim for versions less than 8.2.5064-1","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T15:15:07Z","modified":"2026-04-21T04:35:09.126764Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"BELL-CVE-2022-1886","title":"CVE-2022-1886 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:29.32683Z","modified":"2026-01-26T09:48:40.071072Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-1886","title":"Heap-based Buffer Overflow in vim/vim","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-10-28T10:28:45.228223845Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:23.655778Z"},{"id":"DEBIAN-CVE-2022-1886","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T15:15:07.9Z","modified":"2026-11-03T08:02:02.932929247Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1707","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026apos;Vi\u0026apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\r\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-1886)\n\r\nBuffer Over-read in GitHub repository vim/vim prior to 8.2.(CVE-2022-1927)","status":"published","published":"2022-06-16T11:04:58Z","modified":"2026-08-18T01:16:43.700110319Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-1886","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","status":"published","published":"2022-05-26T15:15:00Z","modified":"2026-02-04T03:02:12.614156Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"CLSA-2022-1654804099","title":"Fix CVE(s): CVE-2022-1851, CVE-2022-1886, CVE-2022-0319, CVE-2022-1898","description":"\n   * SECURITY UPDATE: ml_get() error when exchanging windows in Visual mode\n     - debian/patches/CVE-2022-0319.patch: Correct end of Visual area when\n       entering another buffer\n     - CVE-2022-0319\n   * SECURITY UPDATE: Cursor may be in an invalid position after text formatting\n     - debian/patches/CVE-2022-1851.patch: Correct the cursor position after\n       formatting\n     - CVE-2022-1851\n   * SECURITY UPDATE: Access before start of text with a put command\n     - debian/patches/CVE-2022-1886.patch: Check the length is more than zero\n     - CVE-2022-1886\n   * SECURITY UPDATE: Using freed memory with \"]d\".\n     - debian/patches/CVE-2022-1898: Copy the pattern before searching\n     - CVE-2022-1898","status":"published","published":"2022-06-09T19:48:19Z","modified":"2026-06-04T10:03:40.290722955Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1654804240","title":"Fixed CVEs in vim: CVE-2022-1851, CVE-2022-1898, CVE-2022-1886, CVE-2022-0319","description":"- CVE-2022-0319: correct end of Visual area when entering another buffer\n- CVE-2022-1851: fix invalid cursor position after text formatting\n- CVE-2022-1886: fix access before start of text with a put command\n- CVE-2022-1898: fix using freed memory with ']d'","status":"published","published":"2022-06-09T19:50:40Z","modified":"2026-10-21T10:48:24.212171195Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1654804579","title":"Fixed CVEs in vim: CVE-2022-0319, CVE-2022-1886, CVE-2022-1898, CVE-2022-1851","description":"- CVE-2022-0319: correct end of Visual area when entering another buffer\n- CVE-2022-1851: fix invalid cursor position after text formatting\n- CVE-2022-1886: fix access before start of text with a put command\n- CVE-2022-1898: fix using freed memory with ']d'","status":"published","published":"2022-06-09T19:56:19Z","modified":"2026-10-21T10:47:43.421407734Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1655317854","title":"Fix CVE(s): CVE-2022-1886, CVE-2022-1897, CVE-2022-0714, CVE-2022-1927","description":"\n   * SECURITY UPDATE: Crash with weird 'vartabstop' value\n     - debian/patches/CVE-2022-0714.patch: Check for running into the end\n       of the line\n     - CVE-2022-0714\n   * SECURITY UPDATE: Substitute overwrites allocated buffer\n     - debian/patches/CVE-2022-1897.patch: Disallow undo when in\n       a substitute command\n     - CVE-2022-1897\n   * SECURITY UPDATE: Cursor position may be invalid after \"0;\" range\n     - debian/patches/CVE-2022-1927.patch: Check the cursor position\n       when it was set by \";\" in the range\n     - CVE-2022-1886","status":"published","published":"2022-06-15T18:30:54Z","modified":"2026-06-04T10:03:12.418083154Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2025-1761845210","title":"Fix CVE(s): CVE-2022-1733, CVE-2022-1796, CVE-2022-1886, CVE-2022-3016","description":"   * SECURITY UPDATE: Heap-based Buffer Overflow\n   - debian/patches/CVE-2022-1733.patch: Check for NUL to prevent\n     reading past end of the line when C-indenting\n   - CVE-2022-1733\n   * SECURITY UPDATE: Use After Free\n   - debian/patches/CVE-2022-1796.patch: Fix accessing freed memory when line\n     is flushed by making a copy of the search pattern\n   - CVE-2022-1796\n   * SECURITY UPDATE: Heap-based Buffer Overflow\n   - debian/patches/CVE-2022-1886.patch: Check the length is more than zero\n     to fix access before start of text with a put command\n   - CVE-2022-1886\n   * SECURITY UPDATE: Use After Free\n   - debian/patches/CVE-2022-3016.patch: Return QF_ABORT when location\n     list changed in autocmd\n   - CVE-2022-3016","status":"published","published":"2025-10-30T18:06:08Z","modified":"2026-06-04T10:03:39.857635Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2022-0223","title":"Updated vim packages fix security vulnerability","description":"out-of-bounds read in gchar_cursor() in misc1.c (CVE-2022-1851)\nuse-after-free in find_pattern_in_path() in search.c (CVE-2022-1898)\nout-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)\nbuffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927 )\nout of bounds write in vim_regsub_both() (CVE-2022-1942)\nheap-based buffer overflow in function utf_head_off (CVE-2022-1886)\n","status":"published","published":"2022-06-09T20:49:47Z","modified":"2026-04-16T04:43:03.903530101Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12337-1","title":"gvim-9.0.0453-2.1 on GA media","description":"These are all security issues fixed in the gvim-9.0.0453-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:47.347126Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"USN-6557-1","title":"vim vulnerabilities","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","status":"published","published":"2023-12-14T17:31:12Z","modified":"2026-06-29T13:51:01.056285709Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}