CVE-2022-0392

Katalog CVE

CVSS 7.8 · High EPSS 1,5%

Kerentanan Heap-based Buffer Overflow pada vim, apple macos +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

Rincian

Terbit di NVD

28 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/kb/HT213444 advisory vendor
• https://support.apple.com/kb/HT213488 advisory vendor
• https://github.com/vim/vim/commit/806d037671e133bd28a7864248763f643967973a patch · advisory pihak ketiga
• https://huntr.dev/bounties/d00a2acd-1935-4195-9d5b-4115ef6b3126 exploit · patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/28 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/41 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/43 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-32 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html