Name: CVE-2022-4141: Heap-based Buffer Overflow
Creator: Rapid7
Published: 2022-11-25T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-4141, CWE-787, CWE-122, CVSS 7.8, EPSS 0.00039

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS 3.0 Base Score: 7.3
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade vim	Mar 26, 2024	Nov 25, 2022
Amazon Linux Ami 2	—	Upgrade vim-filesystemUpgrade vim-dataUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-X11Upgrade vim-debuginfoUpgrade vim-common	Jan 24, 2023	Nov 25, 2022
Amazon_linux	—	Upgrade vim	Jan 25, 2023	Nov 25, 2022
Amazon_linux_2023	—	Upgrade vim-minimalUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-commonUpgrade vim-debugsourceUpgrade vim-enhancedUpgrade vim-enhanced-debuginfoUpgrade vim-filesystemUpgrade vim-minimal-debuginfoUpgrade vim-common-debuginfoUpgrade vim-default-editor	Feb 17, 2025	Nov 25, 2022
Debian	—	Upgrade vim	Jun 14, 2023	Nov 25, 2022
Dell Powerstore Dsa2023173	—	Upgrade Dell PowerStoreOS to the latest version	Oct 23, 2025	Jun 21, 2023
Gentoo Linux	—	Upgrade app-editors/gvim.Upgrade app-editors/vim.Upgrade app-editors/vim-core.	May 4, 2023	Nov 25, 2022
Huawei Euleros 2_0_sp10	—	Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-common	Feb 13, 2023	Nov 25, 2022
Huawei Euleros 2_0_sp11	—	Upgrade vim-commonUpgrade vim-minimalUpgrade vim-enhancedUpgrade vim-filesystem	Mar 24, 2023	Nov 25, 2022
Huawei Euleros 2_0_sp5	—	Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimal	Jun 9, 2023	Nov 25, 2022
Huawei Euleros 2_0_sp8	—	Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-common	Feb 9, 2023	Nov 25, 2022
Huawei Euleros 2_0_sp9	—	Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-minimal	Mar 9, 2023	Nov 25, 2022
Redhat_linux	—	No solution exists	Jul 9, 2025	Nov 25, 2022
Suse	—	Upgrade vim-data-commonUpgrade vimUpgrade gvimUpgrade vim-smallUpgrade vim-data	Dec 29, 2022	Nov 25, 2022
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 25, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence