CVE-2022-2343

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0044

Description The issue is related to a heap-based buffer overflow in the ins compl add function of the insexpand.c component of the Vim text editor. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 9.0.0044, update to version 9.0.0044 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ins compl add function in the insexpand.c component until a patch is available.