Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612 | patch third party advisory exploit |
| https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3fee23d48cb1 | patch |
| https://support.apple.com/kb/HT213984 | third party advisory release notes |
| http://seclists.org/fulldisclosure/2023/Oct/24 | third party advisory mailing list |