Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378 | patch third party advisory exploit |
| https://github.com/vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b | patch |
| https://support.apple.com/kb/HT213984 | third party advisory release notes |
| http://seclists.org/fulldisclosure/2023/Oct/24 | third party advisory mailing list |