repository icon
vim / vim Project repository

The official Vim repository

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN29 DAYS

FIX

WITHIN20 DAYS

heap-buffer-overflow in function utf_head_off
soaarony
self closed
Restricted vim sandbox escape
parrot409
Medium
heap-use-after-free in function editing_arg_idx
soaarony
High
•CVE-2023-5535
Off-By-One
coolkingcole
self closed
Heap BoF in trunc_string()
coolkingcole
Medium
•CVE-2023-5344
CWE-476 leads to potential OOB Read
coolkingcole
Medium
•CVE-2023-5441
heap-buffer-overflow in function utf_ptr2char
soaarony
not applicable
heap-buffer-overflow in function vim_regsub_both
soaarony
High
•CVE-2023-4781
segmentation fault in function f_fullcommand
fizz-is-on-the-way
High
•CVE-2023-4734
Heap-use-after-free in function buflist_altfpos in vim
fizz-is-on-the-way
High
•CVE-2023-4733
Vim's embedded terminal allows injection via DECRQSS response
dgl
High
Arbitrary command execution on Windows
stsewd
High
•CVE-2023-4736
Divide-by-zero vulnerability in function `scroll_cursor_bot`
fullwaywang
self closed
OOB Write ops.c
coolkingcole
Medium
•CVE-2023-4735
Restricted shell escape in RVIM
mv-00
High
Undefined behavior after using a specific POC
zwuga
informative
High
heap-buffer-overflow in vim_regsub_both
hikari446
High
•CVE-2023-4738
Null pointer dereference in get_register at register.c:311
thkim0
High
•CVE-2023-2609
REFLECTED XSS "Cross-site Scripting (XSS) "
abdolzx
Medium
heap-buffer-overflow in vim_strrchr
hikari446
High
global-buffer-overflow in utf_ptr2char
hikari446
informative
High
Heap-based Buffer Overflow in function ins_str
khoanguyenxuan
informative
High
null pointer dereference in class_object_index at vim9class.c:1356
thkim0
High
•CVE-2023-1355
Integer Overflow or Wraparound in yank_copy_line
janette88
self closed
heap-buffer-overflow in utf_ptr2char
janette88
High
•CVE-2023-1170
segmentation fault in regexp.c:1788
thkim0
High
•CVE-2023-2610
Out-of-bounds Write in function vim_regsub_both
soaarony
duplicate
High
division zero
thkim0
High
•CVE-2023-1127
Out-of-bounds Read in function vim_strrchr
soaarony
self closed
Use After Free in function mb_charlen
ongk0077
informative
High
heap-use-after-free in function bt_quickfix
soaarony
High
•CVE-2023-4750
global-buffer-overflow in function utf_ptr2char
soaarony
not applicable
NULL Pointer Dereference in function utfc_ptr2len
khoanguyenxuan
Medium
•CVE-2023-1264
Out of Range Pointer offset in mb_charlen of mbyte.c
ongk0077
Medium
•CVE-2023-2426
Use of Out-of-range Pointer Offset in function utf_head_off
jieyongma
not applicable
Incorrect Calculation of Buffer Size in function yank_copy_line
jieyongma
High
•CVE-2023-1175
Buffer Over Read in function inc
jieyongma
self closed
Divide By Zero in function adjust_skipcol
jieyongma
High
•CVE-2023-0512
Out-of-bounds Read in function utf_ptr2char
jieyongma
informative
High
heap-buffer-overflow in function utfc_ptr2len
soaarony
High
•CVE-2023-4751
Heap-based Buffer Overflow in function vim_strncpy
jieyongma
not applicable
Heap Use After Free in function ins_compl_get_exp
jieyongma
High
•CVE-2023-4752
heap-buffer-overflow in same_leader and utfc_ptr2len
soaarony
High
•CVE-2023-0433
Heap-based Buffer Overflow in function ml_append_int
jieyongma
High
•CVE-2023-0288
Heap-based Buffer Overflow in function msg_puts_printf
jieyongma
High
•CVE-2023-0051
Out-of-bounds Write in function do_string_sub
jieyongma
High
•CVE-2023-0054
Out-of-bounds Read in function build_stl_str_hl
jieyongma
High
•CVE-2023-0049
AddressSanitizer: heap-buffer-overflow in alloc.c 246:11
fondxd
High
•CVE-2022-4141
heap-use-after-free in function did_set_spelllang at spell
ex7l0it
High
•CVE-2022-4292
Use After Free in function qf_get_curlist
janette88
High
Floating point exception in function num_divide at eval
ex7l0it
Medium
•CVE-2022-4293
Use After Free in function bt_quickfix
janette88
High
•CVE-2022-3591
heap-buffer-overflow in function inc at misc2.c
ex7l0it
High
•CVE-2022-3520
heap-buffer-overflow in function same_leader at textformat.c:558:7
mist1987
not applicable
heap-buffer-overflow in function skipwhite
mist1987
Medium
•CVE-2022-3491
Use After Free in function did_set_string_option
janette88
High
•CVE-2022-3352
Stack-based Buffer Overflow in function win_redr_ruler
janette88
High
•CVE-2022-3324
Heap-buffer-overflow in same_leader
janette88
not applicable
eval.c:2554:6: runtime error: applying non-zero offset 1 to null pointer
ckng97
not applicable
Stack-based Buffer Overflow in function ex_finally
xiowane
High
•CVE-2022-3296
Use After Free in function process_next_cpt_value
janette88
High
•CVE-2022-3297
Use After Free in function movemark
janette88
High
•CVE-2022-3256
Use After Free in function getcmdline_int
janette88
High
•CVE-2022-3235
Heap-based Buffer Overflow in function utfc_ptr2len
janette88
High
•CVE-2022-3234
Null Dereference in vim_regcomp()
eli2k765
Medium
•CVE-2022-3153
Use After Free in function do_tag
janette88
High
•CVE-2022-3134
Use After Free in function do_cmdline
janette88
High
•CVE-2022-3099
Access violation near NULL on destination operand eval.c:2603:37 in segmentation...
fondxd
Medium
•CVE-2022-3278
Use After Free in Function qf_buf_add_line( )
brenu
High
•CVE-2022-3037
Use After Free in function get_next_valid_entry
janette88
High
•CVE-2022-3016
Use After Free in function qf_fill_buffer
janette88
High
•CVE-2022-2982
NULL Pointer Dereference in function do_mouse
janette88
Medium
•CVE-2022-2980
Heap-based Buffer Overflow in function vim_strncpy
janette88
not applicable
Use After Free in function vim_vsnprintf_typval
janette88
High
•CVE-2022-2946
NULL Pointer Dereference in function sug_filltree
janette88
Medium
•CVE-2022-2923
Use After Free in function find_var_also_in_script
janette88
High
•CVE-2022-2889
NULL Pointer Dereference in function generate_loadvar
janette88
Medium
•CVE-2022-2874
Heap-based Buffer Overflow in function latin_ptr2len
janette88
High
•CVE-2022-2849
Buffer Over-read in function utf_head_off
janette88
High
•CVE-2022-2845
use after free in function generate_PCALL
janette88
High
•CVE-2022-2862
Heap-based Buffer Overflow in function compile_lock_unlock in vim/vim
janette88
High
•CVE-2022-2819
Use After Free in function string_quote
janette88
High
•CVE-2022-2817
Out-of-bounds read in function check_vim9_unlet in vim/vim
janette88
High
•CVE-2022-2816
Heap-based Buffer Overflow occurs in function ins_compl_infercase_gettext in vim...
janette88
not applicable
heap-buffer-overflow occurs in function eval_string ./vim/src/typval.c:2226
enderdzz
High
•CVE-2022-2580
SIGSEGV in file_ff_differs()
abysslab
self closed
Heap-based Buffer Overflow in function ins_compl_infercase_gettext()
xiaoge1001
High
•CVE-2022-2522
Undefined behavior in diff_write_buffer()
abysslab
Medium
•CVE-2022-2598
Heap-based buffer overflow in function vim_iswordp_buf
acquykhud
High
•CVE-2022-2571
Heap-based buffer overflow in function ins_compl_add
acquykhud
High
•CVE-2022-2344
Out-of-bound read in function utf_ptr2char
acquykhud
not applicable
Heap-based Buffer Overflow in function ins_compl_add
jieyongma
High
•CVE-2022-2343
Out-of-bounds Read in function utf_ptr2char
jieyongma
High
•CVE-2022-2581
Heap Use After Free in function skipwhite
jieyongma
High
•CVE-2022-2345
Heap Use After Free in function ex_diffgetput
jieyongma
High
•CVE-2022-2289
Stack-based Buffer Overflow in function spell_dump_compl
jieyongma
High
•CVE-2022-2304
Integer Overflow in function del_typebuf
jieyongma
High
•CVE-2022-2285
Buffer Over-read in function check_suggestions
jieyongma
not applicable
Out-of-bounds Read in function ins_bytes
jieyongma
High
•CVE-2022-2286
Heap-based Buffer Overflow in function utfc_ptr2len
jieyongma
High
•CVE-2022-2284
Heap-based buffer overflow in function inc
acquykhud
High
•CVE-2022-2264
Out-of-bound read in function msg_outtrans_special
acquykhud
High
•CVE-2022-2257
Out-of-bound write in function parse_command_modifiers
acquykhud
High
•CVE-2022-2288
Out-of-bound read data in function suggest_trie_walk() abusing array byts
h4niz
High
•CVE-2022-2287
Out-of-bound write in spell_dump_compl function
h4niz
not applicable
Null pointer dereference in function skipwhite
acquykhud
High
•CVE-2022-2231
Out-of-bound write in function ml_append_int
acquykhud
High
•CVE-2022-2210
Heap-based buffer overflow in function ins_bs
acquykhud
High
•CVE-2022-2207
Null pointer dereference in function diff_check
acquykhud
High
•CVE-2022-2208
Out-of-bound read in function msg_outtrans_attr
acquykhud
High
•CVE-2022-2206
Heap-based buffer overflow in function get_lisp_indent
acquykhud
self closed
Buffer Over-read in function put_on_cmdline
jieyongma
High
•CVE-2022-2175
Out-of-bounds Read in function get_lisp_indent
jieyongma
High
•CVE-2022-2183
Heap-based Buffer Overflow in function utf_ptr2char
jieyongma
High
•CVE-2022-2182
Heap-based Buffer Overflow in function get_lisp_indent
jieyongma
High
•CVE-2022-2125
Memory leaks in function vim_strsave
jieyongma
Medium
Buffer Over-read in function current_quote
jieyongma
High
•CVE-2022-2124
Out-of-bounds Read in function suggest_trie_walk
jieyongma
High
•CVE-2022-2126
Out-of-bounds write in function vim_regsub_both
jieyongma
High
•CVE-2022-2129
use after free in skipwhite
thecrott
High
•$95•CVE-2022-2042
Heap-based Buffer Overflow at ex_substitute function
h4niz
self closed
Infinite recursive function calls result in stack overflow in function eval_list
jieyongma
not applicable
Out-of-bounds write in function append_command
jieyongma
High
•CVE-2022-2000
Use After Free in function utf_ptr2char
jieyongma
High
•CVE-2022-1968
Heap-based Buffer Overflow in function vim_regsub_both
jieyongma
High
•CVE-2022-1942
Out-of-bounds write in function vim_regsub_both
jieyongma
High
•CVE-2022-1897
Use After Free in function find_pattern_in_path
jieyongma
High
•CVE-2022-1898
Out-of-bounds read in function gchar_cursor
jieyongma
High
•CVE-2022-1851
Heap-based Buffer Overflow in function utf_head_off
unknownu0
High
•CVE-2022-1886
Buffer Over-read in function utf_ptr2char
jieyongma
High
•$60•CVE-2022-1927
Out-of-bounds write in function vim_regsub_both
jieyongma
High
•CVE-2022-1785
Infinite recursive function calls result in stack overflow
greatergoodest
Medium
•CVE-2022-1771
Buffer Over-read in function get_one_sourceline
jieyongma
Medium
•CVE-2022-1769
heap-use-after-free in function find_pattern_in_path
jieyongma
Medium
•CVE-2022-1796
NULL Pointer Dereference in function vim_regexec_string
mjcpwns
not applicable