CVE-2022-2874

MediumCVSS 5.5/10Last modified Nov 2, 2026

Description

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
vim	vim/vim	>= unspecified, < 9.0.0224

References

https://github.com/vim/vim/commit/4875d6ab068f09df88d24d81de40dcd8d56e243dPatch, Third Party Advisory
https://huntr.dev/bounties/95f97dfe-247d-475d-9740-b7adc71f4c79Exploit, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202305-16
https://github.com/vim/vim/commit/4875d6ab068f09df88d24d81de40dcd8d56e243dPatch, Third Party Advisory
https://huntr.dev/bounties/95f97dfe-247d-475d-9740-b7adc71f4c79Exploit, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202305-16

Timeline

Published: Aug 18, 2022
Last modified: Nov 2, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-287407.5aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor.CVE-2022-287418.1aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to mis CVE-2022-287427.5aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user CVE-2022-287436.6Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW <= 1.13.1.6, and Application FW <= CVE-2022-287479.8Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. To exploit this vulnerabilit CVE-2022-287494.3Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. A CVE-2022-287509.8Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can r CVE-2022-287517.8The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the package signature v CVE-2022-287527.8Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability. A local lo CVE-2022-287535.4Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a mali CVE-2022-287545.4Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a mali CVE-2022-287556.1The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerabil