CVE-2023-4734

תיאור (מקור, אנגלית)

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-8/10/2026

CWE

CWE-190

מוצרים מושפעים

neovim: neovim; vim: vim; apple: macos

קישורים

• https://github.com/vim/vim/commit/4c6fe2e2ea62469642ed1d80b16d39e616b25cf5 Patch
• https://huntr.dev/bounties/688e4382-d2b6-439a-a54e-484780f82217 ExploitPatchThird Party Advisory
• https://github.com/vim/vim/commit/4c6fe2e2ea62469642ed1d80b16d39e616b25cf5 Patch
• https://huntr.dev/bounties/688e4382-d2b6-439a-a54e-484780f82217 ExploitPatchThird Party Advisory
• http://seclists.org/fulldisclosure/2023/Oct/24 Mailing ListThird Party Advisory
• https://support.apple.com/kb/HT213984 Release NotesThird Party Advisory
• http://seclists.org/fulldisclosure/2023/Oct/24 Mailing ListThird Party Advisory
• https://support.apple.com/kb/HT213984 Release NotesThird Party Advisory