CVE-2023-4751

HIGH7.8Memory safety

JSON export Create alert

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

CVSS breakdown

CVSS 3.0

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

apple / macos14.0 – 14.0
neovim / neovim0.9.0
vim / vim9.0.1331
vim / vim/vimunspecified – 9.0.1331

References

MISChttps://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378
PATCHhttps://github.com/vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b
VENDOR_ADVISORYhttps://support.apple.com/kb/HT213984
MAILING_LISThttp://seclists.org/fulldisclosure/2023/Oct/24

Updated 29m ago · 8 sources