Vim vulnerabilities

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT, which may lead to a crash, although this does not happen in all situations.

Vim is an open source command line text editor that may cause an overflow when parsing relative ex addresses. The issue occurs in the existing overflow check when the line number becomes negative. The impact is low, user interaction is required.

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given, which may lead to a crash, although this does not happen in all situations.

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_too_large. This issue has been addressed in release version 9.0.2108.

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled with the cpo-settings including the 'n' flag. This issue leads to application crashes.

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure.

Vim has a use-after-free vulnerability in memory allocated in the `ga_grow_inner` function. This issue can occur when using the `:history` command, leading to an integer overflow and potential use-after-free.

A Use After Free vulnerability exists in the GitHub repository vim/vim prior to version 9.0.1858. It may lead to undefined behavior, a crash, or potential code execution.

Use of out-of-range pointer offset in GitHub repository vim/vim prior to 9.0.1499.

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

Heap-based buffer overflow in Vim prior to version 9.0.1189.

Out-of-bounds read in Vim prior to version 9.0.1143.

Use-after-free in Vim prior to version 9.0.0789.

Heap-based buffer overflow in Vim 9.0.0946 and below, allowing an attacker to use CTRL-W gf in the expression used on the RHS of the substitute command.

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. The vulnerability may be triggered when processing crafted input in the Vim editor.

Stack-based buffer overflow in Vim prior to version 9.0.0598.

Use-after-free in Vim prior to version 9.0.0579.

Stack-based buffer overflow in Vim prior to version 9.0.0577.

Use-after-free in Vim prior to version 9.0.0530.

A use-after-free vulnerability in the Vim editor prior to version 9.0.0490. The memory flaw can be triggered by specific input.

Heap-based Buffer Overflow vulnerability in the vim editor prior to 9.0.0483. The NVD description does not indicate a specific trigger vector.

A NULL pointer dereference exists in Vim versions prior to 9.0.0404. It can be triggered by crafted input, causing the application to crash.

Use-after-free in Vim prior to version 9.0.0389.

A use-after-free vulnerability in the Vim editor prior to version 9.0.0360. The flaw concerns memory management during data processing.

Use-after-free in Vim prior to version 9.0.0322.

A use-after-free vulnerability in the Vim editor prior to version 9.0.0286. The memory management flaw may lead to undefined behavior or application crashes.

Use After Free vulnerability in the vim editor prior to 9.0.0260. The NVD description does not indicate a specific trigger vector.

A NULL pointer dereference vulnerability in the Vim editor prior to version 9.0.0259. The flaw can be triggered by specific input and lead to an application crash.

Use After Free in GitHub repository vim/vim prior to 9.0.0246. This may lead to undefined behavior or potential code execution when processing specially crafted data.

A NULL pointer dereference exists in Vim versions prior to 9.0.0240. It can be triggered by crafted input, causing the application to crash.

A use-after-free vulnerability in the Vim editor prior to version 9.0.0225. The flaw involves improper memory release during data processing.

A NULL pointer dereference exists in Vim versions prior to 9.0.0224. It can be triggered by crafted input, causing the application to crash.

Use After Free vulnerability in the vim editor prior to 9.0.0221. The NVD description does not indicate a specific trigger vector.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. This may lead to a crash or potential code execution when processing specially crafted data.

Use After Free vulnerability in the vim editor prior to 9.0.0213. The NVD description does not indicate a specific trigger vector.

Heap-based Buffer Overflow vulnerability in the vim editor prior to 9.0.0211. The NVD description does not indicate a specific trigger vector.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

Use After Free vulnerability in vim prior to version 9.0.0046. Could lead to arbitrary code execution or crash.

Heap-based Buffer Overflow vulnerability in vim prior to version 9.0.0045. Could lead to arbitrary code execution or crash.

Heap-based buffer overflow in Vim prior to 9.0.0044. The vulnerability may allow an attacker to execute code or cause a crash.

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. It can lead to stack buffer overflow.

Out-of-bounds read in Vim prior to 9.0. May lead to information disclosure or crash.

Out-of-bounds read in Vim prior to 9.0. May lead to information disclosure or crash.

Integer overflow or wraparound in Vim prior to 9.0. May lead to unexpected behavior or crash.

Heap-based buffer overflow in Vim prior to 9.0. The vulnerability may allow an attacker to execute code or cause a crash.

Out-of-bounds read in Vim prior to 9.0. May lead to information disclosure or crash.

Out-of-bounds write in Vim prior to 8.2. May lead to memory corruption or code execution.

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.