CVE-2022-1420

Publication date 21 April 2022

Last updated 25 August 2025

Ubuntu priority

Why this priority?

Cvss 3 Severity Score

Score breakdown

Description

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
vim	22.04 LTS jammy	Fixed 2:8.2.3995-1ubuntu2.1
	21.10 impish	Ignored end of life
	20.04 LTS focal	Fixed 2:8.1.2269-1ubuntu5.8
	18.04 LTS bionic	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected

Notes

ccdm94

vulnerable functions introduced by commit 22a0c0c4ec (>= 8.1.1834).

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
vim	Upstream: 8b91e71

Severity score breakdown

Parameter	Value
Base score	5.5 · Medium
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Related Ubuntu Security Notices (USN)

USN-5613-1
Vim vulnerabilities
15 September 2022

USN-5613-2
Vim regression
19 September 2022

Other references