CVE-2023-2426 — Use of Out-of-range Pointer Offset in VIM

CWE-823 — Use of Out-of-range Pointer Offset12 documents9 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
VIM VIMVIM
Timeline
PublishedApr 29
Latest updateJul 24

Description

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDvim/vim< 9.0.1499
▶CVEListV5vim/vim_vimunspecified — 9.0.1499
▶Debianvim/vim< 2:9.0.1378-2+2
▶Ubuntuvim/vim< 2:8.1.2269-1ubuntu5.15+4

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
vim vulnerabilities↗2023-06-12
▶
GHSA
GHSA-732j-vmpr-mg9v: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9↗2023-04-30
▶
OSV
CVE-2023-2426: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9↗2023-04-29
▶
CVEList
Use of Out-of-range Pointer Offset in vim/vim↗2023-04-29
▶

📋Vendor Advisories

7
Apple
CVE-2023-2426: macOS Big Sur 11.7.9↗2023-07-24
▶
Apple
CVE-2023-2426: macOS Ventura 13.5↗2023-07-24
▶
Apple
CVE-2023-2426: macOS Monterey 12.6.8↗2023-07-24
▶
Ubuntu
Vim vulnerabilities↗2023-06-12
▶
Red Hat
vim: out-of-range Pointer offset in mb_charlen() of mbyte.c↗2023-04-30
▶
CVE-2023-2426 — Use of Out-of-range Pointer Offset | cvebase