CVE-2023-48235CWE-190

overflow in ex address parsing in vim

Low · published November 16, 2023

CVSS v3.1
2.8
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an

overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONG_MAX - lnum will cause the overflow. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `060623e` which has been included in release version 9.0.2110. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
2.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00755 · 54.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-11-16T22:50Z
EPSS history
Timeline
  • 16 NOV 22:50Z
    overflow in ex address parsing in vim
    cvelistv5