Skip to content
OpenAdvisories
Medium USN-7048-1 1 CVE

vim vulnerability

Published Oct 1, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Suyue Guo discovered that Vim incorrectly handled memory when flushing the
typeahead buffer, leading to heap-buffer-overflow. An attacker could
possibly use this issue to cause a denial of service.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS vim 2:8.1.2269-1ubuntu5.25
Ubuntu · 22.04 LTS 22.04:LTS vim 2:8.2.3995-1ubuntu2.19
Ubuntu · 24.04 LTS 24.04:LTS vim 2:9.1.0016-1ubuntu7.3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vim 2:7.4.1689-3ubuntu1.5+esm25
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS vim 2:8.0.1453-1ubuntu1.13+esm10

Vulnerabilities 1

  • Medium 4.5
    CVE-2024-43802

    heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

    Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may le…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-43802