CVE-2022-2182

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Jun 23, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-218206.3NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which mayCVE-2022-218217.8NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would requiCVE-2022-218227.5NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without LimiCVE-2022-218235.5A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that could allow an attackeCVE-2022-218248.2Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "propertiesCVE-2022-218257.8An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow aCVE-2022-218265.4Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request,CVE-2022-218277.1An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 wCVE-2022-218287.2A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unsCVE-2022-218299.8Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which cCVE-2022-21837.8Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-218306.1A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in
CVE-2022-2182: High severity, CVSS 7.8 | Vulnix