Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2022-2126

Published: 19 June 2022

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Notes

AuthorNote
ccdm94
in bionic and earlier the vulnerable code is in src/spell.c
instead of src/spellsuggest.c.
Priority

Low

CVSS 3 base score: 7.8

Status

Package Release Status
vim
Launchpad, Ubuntu, Debian
bionic Needed

focal Needed

impish Ignored
(reached end-of-life)
jammy Needed

kinetic Needed

trusty Needed

upstream
Released (8.2.5123)
xenial
Released (2:7.4.1689-3ubuntu1.5+esm13)
Patches:
upstream: https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8