CVE-2023-0288

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

Affected

vim · vim/vim

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

7.3 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.48% chance of exploitation in the next 30 days, 40th percentile

Published

2023-01-13

Updated

2025-04-07

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3

Security advisories

• http://seclists.org/fulldisclosure/2023/Mar/17
• vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
• https://support.apple.com/kb/HT213670

References

• CVE Record
• NVD entry