CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@huntr.dev

Published

2023-01-04

Last modified

2025-04-09

Weaknesses

CWE-125

Affected products

• Macos (Apple)
• Fedora (Fedoraproject)
• Neovim (Neovim)
• Hci Compute Node (Netapp)
• Vim (Vim)
• Vimvim (Vim)

References

• http://seclists.org/fulldisclosure/2023/Mar/17
• https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c
• https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOA…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NW…
• https://security.gentoo.org/glsa/202305-16
• https://support.apple.com/kb/HT213670
• https://security.netapp.com/advisory/ntap-20250117-0005/