CVE-2023-4751

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

Affected

vim · vim/vim

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.56% chance of exploitation in the next 30 days, 46th percentile

Published

2023-09-03

Updated

2025-02-13

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378

Security advisories

• http://seclists.org/fulldisclosure/2023/Oct/24
• https://support.apple.com/kb/HT213984
• vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b

References

• CVE Record
• NVD entry