QID 354794

a heap buffer overflow vulnerability was found in vims ins_compl_infercase_gettext() function of the src/insexpand.c file.
This flaw occurs when vim tries to access uninitialized memory when completing a long line.
This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, possibly executing code and corrupting memory. (
( CVE-2022-2522) a flaw was found in vim.
The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability.
This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. (
( CVE-2022-2571) a flaw was found in vim.
The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow.
( CVE-2022-2580) a flaw was found in vim.
( CVE-2022-2581) null pointer dereference in github repository vim/vim prior to 9.0.0224. (
( CVE-2022-2874) a heap use-after-free vulnerability was found in vims do_tag() function of the src/tag.c file.
The issue triggers when the tagfunc closes the window.
This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. (
( CVE-2022-3134) null pointer dereference in github repository vim/vim prior to 9.0.0404. (
( CVE-2022-3153) heap-based buffer overflow in github repository vim/vim prior to 9.0.0483. (
( CVE-2022-3234) use after free in github repository vim/vim prior to 9.0.0490. (
( CVE-2022-3235) use after free in github repository vim/vim prior to 9.0.0530. (
( CVE-2023-0512)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.