Integer Overflow or Wraparound in vim/vim
CVE-2023-2610

7.8HIGH

Key Information:

Vendor

Vim

Status
Vim/vim
Vendor
CVE Published:
9 May 2023

What is CVE-2023-2610?

An integer overflow or wraparound vulnerability exists in the Vim text editor, specifically in versions before 9.0.1532. This flaw can lead to unexpected behavior or security issues when handling integer values, making it crucial for users and developers to upgrade to the latest version to mitigate any potential risks associated with this vulnerability.

Affected Version(s)

vim/vim < 9.0.1532

References

https://huntr.dev/bounties/31e67340-935b-4f6c-a923-f7246b...
https://github.com/vim/vim/commit/ab9a2d884b3a4abe319606e...
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.