PT-2022-4858

CVE-2022-1898

·

Published

2022-05-25

·

Updated

2026-10-31

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2
Description The issue is related to a Use After Free vulnerability in the Vim text editor, specifically with the find pattern in path function. This vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not specified.
Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the find pattern in path function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2022-2001
ALT-PU-2022-2019
ALT-PU-2022-2420
ALT-PU-2022-2430
AZL-9832
CLEANSTART-2024-DZ29192
CLSA-2026-1792153017
DLA-3053-1
DLA-3182-1
MGASA-2022-0223
OESA-2022-1717
OPENSUSE-SU-2022_2102-1
OPENSUSE-SU-2024:12337-1
SUSE-SU-2022:2102-1
SUSE-SU-2022:4619-1
USN-5498-1
USN-5995-1
Found an issue in the description? Have something to add? Feel free to write us 👾