Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Mar 21, 2024 | Aug 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade vim-filesystemUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-commonUpgrade vim-X11 | Mar 7, 2023 | Aug 1, 2022 |
| Amazon_linux_2023 | — | Upgrade vim-default-editorUpgrade vim-filesystemUpgrade vim-debugsourceUpgrade vim-common-debuginfoUpgrade vim-debuginfoUpgrade vim-commonUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-dataUpgrade vim-minimal | Feb 17, 2025 | Aug 1, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 1, 2022 |
| Suse | — | Upgrade gvimUpgrade vim-dataUpgrade vim-data-commonUpgrade vim-smallUpgrade vim | Oct 26, 2022 | Aug 1, 2022 |
| Ubuntu | — | Upgrade xxdUpgrade vim-gtkUpgrade xxd (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-tinyUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-gtk (Ubuntu Pro)Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-athenaUpgrade vimUpgrade vim-noxUpgrade vim-athena (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-gtk3 | Aug 22, 2023 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub