Vim < 9.2.1309 Heap Buffer Overflow with Crafted Spell File
Original title: [vim-security]: Heap Buffer Overflow with Crafted Spell File in Vim < 9.2.1309
Crafted spell file causes Vim to treat SN_SOFO sections as SN_SAL items leading to out-of-bounds read.
A crafted spell file containing two SN_SOFO sections causes Vim to free the soundfolding items of the first section as if they were SN_SAL items. This results in heap buffer overflow and out-of-bounds read. The issue is rated low severity with CVE requested but not assigned.
Unconfirmed: CVE requested but not yet assigned
- SN_SOFO sections mishandled in spell files
- CWE-843 and CWE-125 apply
- Out-of-bounds read occurs
- Severity: Low
Impact: out-of-bounds read via crafted spell file
- Products
- vim
From the original article
Posted by Christian Brabandt on Nov 08 Heap Buffer Overflow with Crafted Spell File in Vim < 9. 2. 1309 ============================================================== Date: 08.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.