Log In Get API Key

6.6Medium

CVE-2022-1725NULL Pointer Dereference in vim/vim

vim vim/vim Published: 2022-05-16 03:00 (4 years ago)

Description

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.

Weakness (CWE): CWE-476

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
apple	macos	< 13.0
vim	vim	< 8.2.4959
vim	vim/vim	unspecified – < 8.2.4959

References and patches

https://huntr.dev/bounties/4363cf07-233e-4d0a-a1d5-c731a400525c ExploitThird Party Advisory
https://github.com/vim/vim/commit/b62dc5e7825bc195efe3041d5b3a9f1528359e1c PatchThird Party Advisory
https://support.apple.com/kb/HT213488 Release NotesThird Party Advisory
20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-listMailing ListRelease NotesThird Party Advisory
20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-listMailing ListThird Party Advisory
GLSA-202305-16 vendor-advisoryThird Party Advisory

CPE matches (NVD) (2)

cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* < 8.2.4959
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* < 13.0

CVSS score

6.6Medium

Source: @huntrdev · CVSS 3.0

Attack vector: Local
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: Low
Availability: High

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

All scores (3)

cna	CVSS 3.0	6.6Medium
nvd	CVSS 3.1	5.5Medium
security@huntr.dev	CVSS 3.0	6.6Medium

EPSS (chance of exploitation in 30 days)

0.52%

higher than 45% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2022-05-15
Published2022-05-16 03:00
Reached IP-DB2026-11-02 22:03
Last updated2026-11-02 22:17

Assigned by (CNA): @huntrdev
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Apple macOS

8.8High

CVE-2026-113970 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, vision…

5.4Medium

CVE-2026-113964 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

5.4Medium

CVE-2026-113965 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6…

5.4Medium

CVE-2026-113968 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

Unscored

CVE-2026-113969 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

Unscored

CVE-2026-113960 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to a…