CVE-2022-2982

HighCVSS 7.8/10Last modified Nov 2, 2026

Description

Use After Free in GitHub repository vim/vim prior to 9.0.0260.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
vim	vim/vim	>= unspecified, < 9.0.0260

References

https://github.com/vim/vim/commit/d6c67629ed05aae436164eec474832daf8ba7420Patch, Third Party Advisory
https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833beExploit, Issue Tracking, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
https://security.gentoo.org/glsa/202305-16
https://github.com/vim/vim/commit/d6c67629ed05aae436164eec474832daf8ba7420Patch, Third Party Advisory
https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833beExploit, Issue Tracking, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/
https://security.gentoo.org/glsa/202305-16

Timeline

Published: Aug 25, 2022
Last modified: Nov 2, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-298203.5In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible CVE-2022-298217.7In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible CVE-2022-298229.8Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection CVE-2022-298239.8Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote CVE-2022-298246.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. Th CVE-2022-298257.5Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) ve CVE-2022-298267.5Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control CVE-2022-298277.5Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti CVE-2022-298287.5Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti CVE-2022-298297.5Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GO CVE-2022-29834.8The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to per CVE-2022-298309.1Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Settin