Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
The product reads data past the end, or before the beginning, of the intended buffer.
https://cwe.mitre.org/data/definitions/125.html →Open in CWE collection →The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
https://cwe.mitre.org/data/definitions/823.html →Open in CWE collection →This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.
https://capec.mitre.org/data/definitions/129.html →Open in CAPEC collection →An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.
https://capec.mitre.org/data/definitions/540.html →Open in CAPEC collection →| Product | Vendor | Status |
|---|---|---|
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| vim | Tracked | |
| debian_linux | * | Tracked |
| fedora | * | Tracked |
| macos | * | Tracked |
| vim | * | Tracked |