CVE-2022-1897

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2

Description The issue is related to an out-of-bounds write in the vim regsub both function of the regexp.c component in the Vim text editor. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable regexp.c component until a patch is available.