CVE-2022-3324

HighCVSS 7.8/10Last modified Sep 24, 2026

Description

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

VendorProductVersions
vimvim/vim>= unspecified, < 9.0.0598

References

Timeline

Published
Sep 27, 2022
Last modified
Sep 24, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-332407.8Memory corruption in Audio due to incorrect type cast during audio use-cases.CVE-2022-332427.8Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.CVE-2022-332437.8Memory corruption due to improper access control in Qualcomm IPC.CVE-2022-332447.5Transient DOS due to reachable assertion in modem during MIB reception and SIB timeoutCVE-2022-332457.8Memory corruption in WLAN due to use after freeCVE-2022-332467.8Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid sessCVE-2022-332487.8Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.CVE-2022-33254.3Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 befCVE-2022-332507.5Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.CVE-2022-332517.5Transient DOS due to reachable assertion in Modem because of invalid network configuration.CVE-2022-332525.5Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.CVE-2022-332535.5Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
CVE-2022-3324: High severity, CVSS 7.8 | Vulnix