CVE-2023-2426

תיאור (מקור, אנגלית)

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

מדדים

CVSS 3.1

5.3 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-8/10/2026

CWE

CWE-823

מוצרים מושפעים

fedoraproject: fedora; apple: macos; neovim: neovim; vim: vim

קישורים

• https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b Patch
• https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b Patch
• https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425 Exploit
• https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425 Exploit
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Mailing ListThird Party Advisory
• https://support.apple.com/kb/HT213844 Third Party Advisory
• https://support.apple.com/kb/HT213845 Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Mailing ListThird Party Advisory