Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

Classification

CVE ID: CVE-2023-4751

CVSS Base Severity: HIGH

CVSS Base Score: 7.8

Affected Products

Vendor: vim

Product: vim/vim

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.08% (probability of being exploited)

EPSS Percentile: 37.08% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378
https://github.com/vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b
https://support.apple.com/kb/HT213984
http://seclists.org/fulldisclosure/2023/Oct/24

Timeline