CVE-2023-4734

HIGH7.8Memory safety

JSON export Create alert

Description

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

CVSS breakdown

CVSS 3.0

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Apple / macOS14.1
neovim / neovim0.7.0 – 0.10.0
vim / vim9.0.1846
vim / vim/vimunspecified – 9.0.1846

References

MISChttps://huntr.dev/bounties/688e4382-d2b6-439a-a54e-484780f82217
PATCHhttps://github.com/vim/vim/commit/4c6fe2e2ea62469642ed1d80b16d39e616b25cf5
VENDOR_ADVISORYhttps://support.apple.com/kb/HT213984
MAILING_LISThttp://seclists.org/fulldisclosure/2023/Oct/24

Updated 29m ago · 8 sources