vim is vulnerable to Heap-based Buffer Overflow · CVE-2021-3875 · GitHub Advisory Database · GitHub

vim is vulnerable to Heap-based Buffer Overflow

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

vim is vulnerable to Heap-based Buffer Overflow

References

Published by the National Vulnerability Database

Oct 15, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Feb 2, 2023

Weaknesses

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Learn more on MITRE.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer. Learn more on MITRE.