CVE-2024-43802

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Vim is an improved version of the Unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. This may lead to the tb_off position within the buffer being out of bounds.

Risk Assessment

This could lead to out-of-bounds memory read or write, potentially resulting in a crash or code execution.

Recommendation

Upgrade Vim to the latest stable version containing the fix.

Original NVD description (English source)

Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tb_off position within the typ