VDB
SUSE-SU-2025%3A0722-1
SUSE-SU-2025%3A0722-1
PUBLISHED
CVSS 4.199999809265137 MEDIUM
This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command (bsc#1229685). - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer (bsc#1229822). - CVE-2024-45306: heap buffer overflow when cursor position is invalid (bsc#1230078). - CVE-2025-22134: heap buffer overflow when switching to other buffers using the :all command with active visual mode (bsc#1235695). - CVE-2025-24014: NULL pointer dereference may lead to segmentation fault when in silent Ex mode (bsc#1236151). - CVE-2025-1215: memory corruption when manipulating the --log argument (bsc#1237137).
Risk Scores
CVSS 3.1
4.199999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| gvim | ||
| vim |
Timeline
- Feb 26, 2025 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0722-1.json advisory
- https://www.suse.com/support/update/announcement/2025/suse-su-20250722-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-February/020449.html advisory
- https://bugzilla.suse.com/1229685 advisory
- https://bugzilla.suse.com/1229822 advisory
- https://bugzilla.suse.com/1230078 advisory
- https://bugzilla.suse.com/1235695 advisory
- https://bugzilla.suse.com/1236151 advisory
- https://bugzilla.suse.com/1237137 advisory
- https://www.suse.com/security/cve/CVE-2024-43790/ advisory
- https://www.suse.com/security/cve/CVE-2024-43802/ advisory
- https://www.suse.com/security/cve/CVE-2024-45306/ advisory
- https://www.suse.com/security/cve/CVE-2025-1215/ advisory
- https://www.suse.com/security/cve/CVE-2025-22134/ advisory
- https://www.suse.com/security/cve/CVE-2025-24014/ advisory