NetSight
IP …
high7.8

CVE-2022-1720

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956.

Impact

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Affected products

VendorProductAffected versions
VimVim
before 8.2.4956
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 35, 36
AppleMacos
before 11.7
from 12.0 before 12.6

Weakness classification

CWE-126CWE-125

References