← All advisories

High severity7.8NVD Advisory· Published Jan 26, 2022· Updated Jun 17, 2026

CVE-2022-0368

CVE-2022-0368

Description

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Vim/Vim3 versions
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*range: <8.2.4217
- (no CPE)range: <8.2
- (no CPE)range: unspecified
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=12.0,<12.6
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/vim&distro=openSUSE%20Tumbleweed
Range: < 9.0.0453-2.1

Patches

Vulnerability mechanics

References

10

github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baanvdPatchThird Party Advisory
huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9nvdExploitIssue TrackingPatchThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/28nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/41nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/43nvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/03/msg00018.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202208-32nvdThird Party Advisory
support.apple.com/kb/HT213444nvdVendor Advisory
support.apple.com/kb/HT213488nvdVendor Advisory

News mentions

0

No linked articles in our index yet.