Skip to content
OpenAdvisories
Medium RLSA-2022:5813 3 CVEs

Moderate: vim security update

Published Aug 2, 2022 · Updated Feb 5, 2026

Summary

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Out-of-bounds Write (CVE-2022-1785)

* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)

* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 vim 2:8.0.1763-19.el8_6.4

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2088689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2091682
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2091687