Description (CNA)
Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| vim / vim | affected < 9.2.0077 |
CWE
CWE-20, CWE-122
References
- https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p
- https://github.com/vim/vim/commit/65c1a143c331c886dc28
- https://github.com/vim/vim/releases/tag/v9.2.0077
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.