QID 354870

a heap buffer overflow vulnerability was found in vims ins_compl_infercase_gettext() function of the src/insexpand.c file.
This flaw occurs when vim tries to access uninitialized memory when completing a long line.
This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, possibly executing code and corrupting memory. (
( CVE-2022-2522) heap-based buffer overflow in github repository vim/vim prior to 9.0.0220. (
( CVE-2022-2849) use after free in github repository vim/vim prior to 9.0.0221. (
( CVE-2022-2862) a heap use-after-free vulnerability was found in vims qf_fill_buffer() function of the src/quickfix.c file.
The issue occurs because vim uses freed memory when recursively using quickfixtextfunc.
This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. (
( CVE-2022-2982) a heap use-after-free vulnerability was found in vims get_next_valid_entry() function of the src/quickfix.c file.
The issue occurs because vim is using freed memory when the location list is changed in autocmd.
( CVE-2022-3016) use after free in github repository vim/vim prior to 9.0.0530. (
( CVE-2022-3256) stack-based buffer overflow in github repository vim/vim prior to 9.0.0598. (
( CVE-2022-3324) heap-based buffer overflow in github repository vim/vim prior to 9.0.0742. (
( CVE-2022-47024) heap-based buffer overflow in github repository vim/vim prior to 9.0.1144. (
( CVE-2023-0051) out-of-bounds write in github repository vim/vim prior to 9.0.1145. (

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.