CVE-2023-48236
LowCVSS 2.8Exploitation Probability (EPSS)
Low risk48th percentile — higher than 48% of all known CVEs
Summary
Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT, which may lead to a crash, although this does not happen in all situations.
Risk Assessment
The risk is low as user interaction is required, and a crash may not occur in every situation.
Recommendation
Users are advised to upgrade to version 9.0.2111, which addresses this vulnerability.
Original NVD description (English source)
Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit `73b2d379` which has been included in release version 9.0.2111. Users are advised to upgrade. There are no known workarounds for this vulnerability.