
CVE-2023-4734 – Integer Overflow or Wraparound in vim/vim
https://notcve.org/view.php?id=CVE-2023-4734
02 Sep 2023 — Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. Un Desbordamiento de Enteros o Wraparound en el repositorio de GitHub vim/vim version anterior a 9.0.1846. It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. • http://seclists.org/fulldisclosure/2023/Oct/24 • CWE-190: Integer Overflow or Wraparound •

CVE-2023-2610 – Integer Overflow or Wraparound in vim/vim
https://notcve.org/view.php?id=CVE-2023-2610
09 May 2023 — Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. It was discovered that Vim was not properly performing bounds checks when processing register contents, which could lead to a NULL pointer ... • https://github.com/vim/vim/commit/ab9a2d884b3a4abe319606ea95a5a6d6b01cd73a • CWE-190: Integer Overflow or Wraparound •

CVE-2023-2609 – NULL Pointer Dereference in vim/vim
https://notcve.org/view.php?id=CVE-2023-2609
09 May 2023 — NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. It was discovered that Vim was not properly performing bounds checks when processing register contents, which could lead to a NULL pointer derefe... • https://github.com/vim/vim/commit/d1ae8366aff286d41e7f5bc513cc0a1af5130aad • CWE-476: NULL Pointer Dereference •

CVE-2023-2426 – Use of Out-of-range Pointer Offset in vim/vim
https://notcve.org/view.php?id=CVE-2023-2426
29 Apr 2023 — Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. It was discovered that Vim was not properly performing bounds checks when processing register contents, which could lead to a NULL poin... • https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b • CWE-823: Use of Out-of-range Pointer Offset •

CVE-2023-1355 – NULL Pointer Dereference in vim/vim
https://notcve.org/view.php?id=CVE-2023-1355
11 Mar 2023 — NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. • https://github.com/vim/vim/commit/d13dd30240e32071210f55b587182ff48757ea46 • CWE-476: NULL Pointer Dereference •

CVE-2023-1264 – NULL Pointer Dereference in vim/vim
https://notcve.org/view.php?id=CVE-2023-1264
07 Mar 2023 — NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. It was discovered that Vim was not properly performing memory management operations. • https://github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6 • CWE-476: NULL Pointer Dereference •

CVE-2023-1175 – Incorrect Calculation of Buffer Size in vim/vim
https://notcve.org/view.php?id=CVE-2023-1175
04 Mar 2023 — Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. • https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2023-1170 – Heap-based Buffer Overflow in vim/vim
https://notcve.org/view.php?id=CVE-2023-1170
03 Mar 2023 — Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. • https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c • CWE-122: Heap-based Buffer Overflow •

CVE-2023-1127 – Divide By Zero in vim/vim
https://notcve.org/view.php?id=CVE-2023-1127
01 Mar 2023 — Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. • https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac41c9215b09c9ce2d3c • CWE-369: Divide By Zero •

CVE-2023-0512 – Divide By Zero in vim/vim
https://notcve.org/view.php?id=CVE-2023-0512
26 Jan 2023 — Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. macOS Ventura 13.3 addresses buffer overflow, bypass, code execution, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities. • http://seclists.org/fulldisclosure/2023/Mar/17 • CWE-369: Divide By Zero •