
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-0128 is a security vulnerability affecting Vim text editor that was discovered in early 2022. The vulnerability is characterized as an out-of-bounds read issue that could potentially lead to denial of service or arbitrary code execution when processing maliciously crafted input (Apple Security, Gentoo Security).
The vulnerability is an out-of-bounds read vulnerability that occurs when reading one byte beyond the end of a line. The issue was addressed with improved checks, specifically by checking for NUL byte first before processing line content (Vim Commit).
The vulnerability could allow an attacker to cause a denial of service condition or potentially execute arbitrary code through maliciously crafted input. The severity of the impact depends on the context in which Vim is being used, particularly if it's configured to run with elevated privileges (OSS Security).
The vulnerability was patched in various versions of Vim across different platforms. Users are advised to update to the patched versions available through their respective package managers. For macOS users, the fix was included in macOS Monterey 12.3, Big Sur 11.6.6, and Security Update 2022-005 Catalina (Apple Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."