CVE-2023-4781
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Heap-based buffer overflow exists in the GitHub repository vim/vim prior to version 9.0.1873.
Risk Assessment
Buffer overflow may lead to the execution of malicious code, posing a serious security threat to systems using this version of the software.
Recommendation
It is recommended to upgrade to version 9.0.1873 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in vim/vim
See all- CVE-2023-4750High
A Use After Free vulnerability exists in the GitHub repository vim/vim prior to version 9.0.1857.
- CVE-2023-4733High
There is a Use After Free vulnerability in the GitHub repository vim/vim prior to version 9.0.1840.
- CVE-2023-4751High
There is a heap-based buffer overflow vulnerability in the GitHub repository vim/vim prior to version 9.0.1331.
- CVE-2023-4738High
A heap-based buffer overflow vulnerability exists in the GitHub repository vim/vim prior to version 9.0.1848.
- CVE-2023-4736High
An untrusted search path vulnerability exists in the GitHub repository vim/vim prior to version 9.0.1833.
- CVE-2023-4735High
An out-of-bounds write vulnerability exists in the GitHub repository vim/vim prior to version 9.0.1847.
- CVE-2023-4734High
An integer overflow or wraparound exists in the GitHub repository vim/vim prior to version 9.0.1846.
- CVE-2023-3896High
Versions of vim/vim from 9.0.1367-1 to 9.0.1367-3 contain a divide by zero error, which may lead to unexpected application behavior.
- CVE-2023-2610High
An integer overflow or wraparound exists in the GitHub repository vim/vim prior to version 9.0.1532.
- CVE-2023-2609Medium
There is a NULL Pointer Dereference vulnerability in the GitHub repository vim/vim prior to version 9.0.1531.
Original NVD description (English source)
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.