Skip to content
OpenAdvisories

Package · Wolfi

vim

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Low 3.6
    CVE-2026-46483

    Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag

    Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d comman…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.9
    CVE-2024-47814

    use-after-free when closing buffers in Vim

    Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new …

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.5
    CVE-2024-45306

    heap-buffer-overflow in Vim

    Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a…

    vim vim vim vim Debian Wolfi
  • Medium 4.5
    CVE-2024-43802

    heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

    Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may le…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.5
    CVE-2024-43790

    heap-buffer-overflow in do_search() in Vim < 9.1.0689

    Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern is displayed at the bottom of the screen in a buffer (msgbuf). When right-left mode (:set rl) is ena…

    vim vim vim vim Debian Alpine Wolfi
  • Medium 4.5
    CVE-2024-43374

    Vim heap-use-after-free in src/arglist.c:207

    The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including …

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.4
    CVE-2023-1355

    NULL Pointer Dereference in vim/vim

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

    vim vim/vim vim vim Debian Alpine Wolfi
  • Medium 6.6
    CVE-2023-1264

    NULL Pointer Dereference in vim/vim

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2023-1175

    Incorrect Calculation of Buffer Size in vim/vim

    Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2023-1127

    Divide By Zero in vim/vim

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.

    vim vim/vim vim vim Debian Azure Linux Alpine Wolfi