CVE-2022-0128
NixOS vulnerability analysis and mitigation

Overview

CVE-2022-0128 is a security vulnerability affecting Vim text editor that was discovered in early 2022. The vulnerability is characterized as an out-of-bounds read issue that could potentially lead to denial of service or arbitrary code execution when processing maliciously crafted input (Apple Security, Gentoo Security).

Technical details

The vulnerability is an out-of-bounds read vulnerability that occurs when reading one byte beyond the end of a line. The issue was addressed with improved checks, specifically by checking for NUL byte first before processing line content (Vim Commit).

Impact

The vulnerability could allow an attacker to cause a denial of service condition or potentially execute arbitrary code through maliciously crafted input. The severity of the impact depends on the context in which Vim is being used, particularly if it's configured to run with elevated privileges (OSS Security).

Mitigation and workarounds

The vulnerability was patched in various versions of Vim across different platforms. Users are advised to update to the patched versions available through their respective package managers. For macOS users, the fix was included in macOS Monterey 12.3, Big Sur 11.6.6, and Security Update 2022-005 Catalina (Apple Security).

Additional resources


SourceThis report was generated using AI

Related NixOS vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-14330CRITICAL9.8
  • NixOSNixOS
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
NoYesDec 09, 2025
CVE-2025-14329HIGH8.8
  • NixOSNixOS
  • cpe:2.3:a:mozilla:firefox_esr
NoYesDec 09, 2025
CVE-2025-14333HIGH8.1
  • NixOSNixOS
  • firefox-esr
NoYesDec 09, 2025
CVE-2025-14332HIGH7.3
  • NixOSNixOS
  • thunderbird
NoYesDec 09, 2025
CVE-2025-14331MEDIUM6.5
  • NixOSNixOS
  • firefox
NoYesDec 09, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management