CVE-2022-1616highCWE-416

CVE-2022-1616: falha de alta gravidade em vim/vim

Use after free in append_command in vim/vim

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar vim/vim+ Monitorar vim

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 2.7%
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
Produtos afetados
vim · vim/vim
CVEs relacionadas — vim/vim

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0572HIGHHeap-based Buffer Overflow in vim/vimEPSS 26.5%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.7%CVE-2022-1381HIGHglobal heap buffer overflow in skip_range in vim/vimEPSS 3.1%CVE-2022-1619MEDIUMHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimEPSS 2.6%CVE-2022-1621HIGHHeap buffer overflow in vim_strncpy find_word in vim/vimEPSS 2.4%CVE-2021-3968HIGHHeap-based Buffer Overflow in vim/vimEPSS 2.3%