← All advisories

High severity7.8NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026

CVE-2022-1154

CVE-2022-1154

Description

Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

Vim/Vimllm-fuzzy2 versions
<8.2.4646+ 1 more
- (no CPE)range: <8.2.4646
- (no CPE)range: unspecified
osv-coords6 versions
pkg:rpm/almalinux/vim-common pkg:rpm/almalinux/vim-enhanced pkg:rpm/almalinux/vim-filesystem pkg:rpm/almalinux/vim-minimal pkg:rpm/almalinux/vim-X11 pkg:rpm/opensuse/vim&distro=openSUSE%20Tumbleweed
< 2:8.0.1763-16.el8_5.13+ 5 more
- (no CPE)range: < 2:8.0.1763-16.el8_5.13
- (no CPE)range: < 2:8.0.1763-16.el8_5.13
- (no CPE)range: < 2:8.0.1763-16.el8_5.13
- (no CPE)range: < 2:8.0.1763-16.el8_5.13
- (no CPE)range: < 2:8.0.1763-16.el8_5.13
- (no CPE)range: < 9.0.0453-2.1

Patches

Vulnerability mechanics

References

9

github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5nvdPatchThird Party Advisory
huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425nvdExploitPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2022/05/msg00022.htmlnvdThird Party Advisory
lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202208-32nvdThird Party Advisory
www.oracle.com/security-alerts/cpujul2022.htmlnvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/nvd
security.gentoo.org/glsa/202305-16nvd

News mentions

0

No linked articles in our index yet.