CVE Database›Document archive›CVE-2021-3875

CVE-2021-3875

vim: heap-based buffer overflow

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 5, 2021

Updated · July 3, 2026

Description

There's an out-of-bounds read flaw in Vim's ex_docmd.c. An attacker who is capable of tricking a user into opening a specially crafted file could trigger an out-of-bounds read on a memmove operation, potentially causing an impact to application availability.

Statement

This flaw does not affect vim as shipped in any versions of Red Hat Enterprise Linux because it was introduced in a newer version than those shipped.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 · Out-of-bounds Read