CVE-2022-1785 - Out-of-bounds Write in vim/vim

Back Back to CVE browser

HIGH

Out-of-bounds Write in vim/vim

Published May 19, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.49%

Description

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

Affected products

Vendor Vim Product Vim/vim Default
unknown
Affected
- ≥ unspecified, < 8.2.4977

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Vim	Vim/vim	unknown	Affected ≥ unspecified, < 8.2.4977

Red Hat Enterprise Linux 8

vim-2:8.0.1763-19.el8_6.4

Fixed · RHSA-2022:5813
Red Hat Enterprise Linux 8

vim-2:8.0.1763-19.el8_6.4

Fixed · RHSA-2022:5813
Red Hat Enterprise Linux 9

vim-2:8.2.2637-16.el9_0.3

Fixed · RHSA-2022:5942
Red Hat Enterprise Linux 9

vim-2:8.2.2637-16.el9_0.3

Fixed · RHSA-2022:5942
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

vim-2:8.0.1763-19.el8_6.4

Fixed · RHSA-2022:5813
Red Hat Enterprise Linux 6

vim

Not affected
Red Hat Enterprise Linux 7

vim

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	vim-2:8.0.1763-19.el8_6.4	Fixed	RHSA-2022:5813
Red Hat Enterprise Linux 8	vim-2:8.0.1763-19.el8_6.4	Fixed	RHSA-2022:5813
Red Hat Enterprise Linux 9	vim-2:8.2.2637-16.el9_0.3	Fixed	RHSA-2022:5942
Red Hat Enterprise Linux 9	vim-2:8.2.2637-16.el9_0.3	Fixed	RHSA-2022:5942
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	vim-2:8.0.1763-19.el8_6.4	Fixed	RHSA-2022:5813
Red Hat Enterprise Linux 6	vim	Not affected	n/a
Red Hat Enterprise Linux 7	vim	Not affected	n/a

Remediation

Red Hat mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (11)

https://access.redhat.com/security/cve/CVE-2022-1785
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2088689
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25065
Advisory
https://github.com/vim/vim/commit/e2bd8600b873d2cd1f9d667c28cba8b1dba18839
PatchThird Party Advisory
https://huntr.dev/bounties/8c969cba-eef2-4943-b44a-4e3089599109
ExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html
mailing-listMailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1785
https://security.gentoo.org/glsa/202208-32
vendor-advisoryThird Party Advisory
https://security.gentoo.org/glsa/202305-16
vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2022-1785

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-1785		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2088689		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25065		Advisory
https://github.com/vim/vim/commit/e2bd8600b873d2cd1f9d667c28cba8b1dba18839		PatchThird Party Advisory
https://huntr.dev/bounties/8c969cba-eef2-4943-b44a-4e3089599109		ExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html		mailing-listMailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1785
https://security.gentoo.org/glsa/202208-32		vendor-advisoryThird Party Advisory
https://security.gentoo.org/glsa/202305-16		vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2022-1785

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published May 19, 2022

Updated Nov 3, 2025

Reserved May 18, 2022

Link CVE-2022-1785

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1785

Red Hat

Severity Moderate

Public date May 19, 2022

Bugzilla 2088689

Link CVE-2022-1785

ENISA EUVD

Assigner @huntrdev

Published May 19, 2022

Updated Nov 3, 2025

Link EUVD-2022-25065

GitHub

No data