CVE-2022-4141

HighCVSS 7.8/10Last modified Sep 24, 2026

Description

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
vim	vim/vim	>= unspecified, < 9.0.0947

References

https://github.com/vim/vim/commit/cc762a48d42b579fb7bdec2c614636b830342dd5Patch, Third Party Advisory
https://huntr.dev/bounties/20ece512-c600-45ac-8a84-d0931e05541fExploit, Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00015.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AZ3JMSUCR6Y7626RDWQ2HNSUFIQOJ33G/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6ZNKVN4GICORTVFKVCM4MSOXCYWNHUC/Mailing List, Third Party Advisory
https://security.gentoo.org/glsa/202305-16Third Party Advisory
https://github.com/vim/vim/commit/cc762a48d42b579fb7bdec2c614636b830342dd5Patch, Third Party Advisory
https://huntr.dev/bounties/20ece512-c600-45ac-8a84-d0931e05541fExploit, Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00015.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AZ3JMSUCR6Y7626RDWQ2HNSUFIQOJ33G/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6ZNKVN4GICORTVFKVCM4MSOXCYWNHUC/Mailing List, Third Party Advisory
https://security.gentoo.org/glsa/202305-16Third Party Advisory

Timeline

Published: Nov 25, 2022
Last modified: Sep 24, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-414128.6An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Requ CVE-2022-414134.3perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted i CVE-2022-414145.3An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernam CVE-2022-414159.8Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows at CVE-2022-414167.2Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_b CVE-2022-414179.8BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.CVE-2022-414187.2An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute a CVE-2022-414196.5Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt binary.CVE-2022-41424.8The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg_gallery_filters aja CVE-2022-414205.5nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component CVE-2022-414236.5Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.CVE-2022-414246.5Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls.