CVE-2022-1942

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2

Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the vim regsub both() function, which can be exploited by a remote attacker to execute arbitrary code. This overflow occurs in the dynamic memory, potentially allowing for code execution. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider disabling the vim regsub both() function until a patch is available.