← back
CVE-2021-3968

Heap-based Buffer Overflow in vim/vim

CVSS 8 HIGHEPSS 2.1%CWE-122
In short

A flaw in Vim allows attackers to write data beyond the intended memory boundaries, potentially causing the application to crash or execute malicious code. This happens due to improper memory management when handling certain input.

Technical detail

Heap-based buffer overflow in Vim triggered through malformed input that bypasses boundary checks on heap-allocated memory. Requires user interaction (opening a crafted file), leading to memory corruption, denial of service, or arbitrary code execution depending on exploitation constraints.

Summary generated and translated by AI from the official description.
vim is vulnerable to Heap-based Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
vim · vim/vim

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →