CVE-2022-2207

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Vendor	Product	Versions
vim	vim/vim	>= unspecified, < 8.2

References

https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97bPatch, Third Party Advisory
https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9Exploit, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
https://security.gentoo.org/glsa/202208-32Third Party Advisory
https://security.gentoo.org/glsa/202305-16
https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97bPatch, Third Party Advisory
https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9Exploit, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
https://security.gentoo.org/glsa/202208-32Third Party Advisory
https://security.gentoo.org/glsa/202305-16

Timeline

Published: Jun 27, 2022
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220707.8Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Sn CVE-2022-220717.8Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon A CVE-2022-220727.8Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdrago CVE-2022-220747.8Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag CVE-2022-220755.5Information Disclosure in Graphics during GPU context switch.CVE-2022-220765.5information disclosure due to cryptographic issue in Core during RPMB read request.CVE-2022-220777.8Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile CVE-2022-220784.6Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in CVE-2022-220794.6Denial of service while processing fastboot flash command on mmc due to buffer over read CVE-2022-22085.5NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.CVE-2022-220807.8Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-220817.8Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearabl