CVE-2022-1720CWE-126

Buffer Over-read in function grab_file_name in vim/vim

Medium · published May 16, 2022

CVSS v3.0
6.6
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

The record
Technical detail
CVSS v3.0
6.6 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.02177 · 82.2th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2022-05-16T00:00Z
EPSS history
Timeline
  • 16 MAY 00:00Z
    Buffer Over-read in function grab_file_name in vim/vim
    cvelistv5