CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

• CWE-823
• CWE-119

• http://seclists.org/fulldisclosure/2022/Oct/28Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Release Notes, Third Party Advisory
• https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30Patch, Third Party Advisory
• https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016eaExploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://support.apple.com/kb/HT213488Release Notes, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/28Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Release Notes, Third Party Advisory
• https://github.com/vim/vim/commit/6456fae9ba8e72c74b2c0c499eaf09974604ff30Patch, Third Party Advisory
• https://huntr.dev/bounties/f3f3d992-7bd6-4ee5-a502-ae0e5f8016eaExploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://support.apple.com/kb/HT213488Release Notes, Third Party Advisory

Published

Feb 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0723Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2022-0724Insecure Storage of Sensitive Information in GitHub reposito…6.5
• CVE-2022-0725A flaw was found in keepass. The vulnerability occurs due to…7.5
• CVE-2022-0726Missing Authorization in GitHub repository chocobozzz/peertu…5.4
• CVE-2022-0727Improper Access Control in GitHub repository chocobozzz/peer…5.4
• CVE-2022-0728The Easy Smooth Scroll Links WordPress plugin before 2.23.1 …4.8
• CVE-2022-0730Under certain ldap conditions, Cacti authentication can be b…9.8
• CVE-2022-0731Improper Access Control (IDOR) in GitHub repository dolibarr…6.5
• CVE-2022-0732The backend infrastructure shared by multiple mobile device …7.5
• CVE-2022-0734A cross-site scripting vulnerability was identified in the C…6.1
• CVE-2022-0735An issue has been discovered in GitLab CE/EE affecting all v…9.8
• CVE-2022-0736Insecure Temporary File in GitHub repository mlflow/mlflow p…7.5