Use-After-Free

2022-10-0911:04:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vim

use-after-free

vulnerability

heap

0.001 Low

EPSS

Percentile

41.0%

JSON

vim is vulnerable to use-after-free. The vulnerability is possible because the did_set_string_option refers memory even after it has been freed, leading to a heap use-after-free vulnerability.

CPENameOperatorVersion
vim:edgeeq8.2.2852-r0
vim:edgeeq8.2.0735-r0
vim:edgeeq8.2.0-r0
vim:edgeeq8.2.3779-r0
vim:edgeeq8.2.2677-r0
vim:edgeeq8.2.3650-r0
vim:edgeeq8.2.3082-r0
vim:edgeeq8.2.3300-r0
vim:edgeeq8.2.3567-r0
vim:edgeeq8.2.3275-r0

Name	Operator	Version
vim:edge	eq	8.2.2852-r0
vim:edge	eq	8.2.0735-r0
vim:edge	eq	8.2.0-r0
vim:edge	eq	8.2.3779-r0
vim:edge	eq	8.2.2677-r0
vim:edge	eq	8.2.3650-r0
vim:edge	eq	8.2.3082-r0
vim:edge	eq	8.2.3300-r0
vim:edge	eq	8.2.3567-r0
vim:edge	eq	8.2.3275-r0