Vulnerability Lookup | Boteraser

🛡️ CVE-2022-1420

🟡 CVSS 5.5 — Medium ⚠️ Exploit Public CWE-823 NVD

5.5

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

Details

Severity MEDIUM

CVSS Score 5.5

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE CWE-823

Public Exploit ⚠️ Yes

Source NVD

Published 2022-04-21

Updated 2026-06-08

Modified 2024-11-21

Fix URL https://github.com/vim/vim/commit/8b91e71441069b1dde9ac9ff9d9a829b1b4aecca

Affected Packages

Software	From version	Fixed in
fedora	—	—
macos	—	13.0
vim	—	8.2.4774

References

http://seclists.org/fulldisclosure/2022/Oct/28

Mailing List, Release Notes, Third Party Advisory http://seclists.org/fulldisclosure/2022/Oct/41

Patch, Third Party Advisory https://github.com/vim/vim/commit/8b91e71441069b1dde9ac9ff9d9a829b1b4aecca

Exploit, Issue Tracking, Patch, Third Party Advisory https://huntr.dev/bounties/a4323ef8-90ea-4e1c-90e9-c778f0ecf326

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/

Third Party Advisory https://security.gentoo.org/glsa/202208-32

https://security.gentoo.org/glsa/202305-16

Release Notes, Third Party Advisory https://support.apple.com/kb/HT213488

http://seclists.org/fulldisclosure/2022/Oct/28

Mailing List, Release Notes, Third Party Advisory http://seclists.org/fulldisclosure/2022/Oct/41

Patch, Third Party Advisory https://github.com/vim/vim/commit/8b91e71441069b1dde9ac9ff9d9a829b1b4aecca

Exploit, Issue Tracking, Patch, Third Party Advisory https://huntr.dev/bounties/a4323ef8-90ea-4e1c-90e9-c778f0ecf326

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/

Third Party Advisory https://security.gentoo.org/glsa/202208-32

https://security.gentoo.org/glsa/202305-16

Release Notes, Third Party Advisory https://support.apple.com/kb/HT213488

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Patch Gap Protection

Running software with known vulnerabilities?

BotEraser can help reduce exposure by blocking IPs associated with exploit activity — even before a patch is available.

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.