PT-2022-4858
CVE-2022-1898
·
Published
2022-05-25
·
Updated
2026-10-31
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 8.2
Description
The issue is related to a Use After Free vulnerability in the Vim text editor, specifically with the
find pattern in path function. This vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not specified.Recommendations
For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
find pattern in path function until a patch is available.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾