CVE-2021-3875
vim: heap-based buffer overflow
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 5, 2021
Updated · July 3, 2026
Description
There's an out-of-bounds read flaw in Vim's ex_docmd.c. An attacker who is capable of tricking a user into opening a specially crafted file could trigger an out-of-bounds read on a memmove operation, potentially causing an impact to application availability.
Statement
This flaw does not affect vim as shipped in any versions of Red Hat Enterprise Linux because it was introduced in a newer version than those shipped.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 · Out-of-bounds Read