CVE-2022-1381

global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

• CWE-122
• CWE-787

• http://seclists.org/fulldisclosure/2022/Oct/28
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Release Notes, Third Party Advisory
• https://github.com/vim/vim/commit/f50808ed135ab973296bca515ae4029b321afe47Patch, Third Party Advisory
• https://huntr.dev/bounties/55f9c0e8-c221-48b6-a00e-bdcaebaba4a4Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://security.gentoo.org/glsa/202305-16
• https://support.apple.com/kb/HT213488Release Notes, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Oct/28
• http://seclists.org/fulldisclosure/2022/Oct/41Mailing List, Release Notes, Third Party Advisory
• https://github.com/vim/vim/commit/f50808ed135ab973296bca515ae4029b321afe47Patch, Third Party Advisory
• https://huntr.dev/bounties/55f9c0e8-c221-48b6-a00e-bdcaebaba4a4Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://security.gentoo.org/glsa/202305-16
• https://support.apple.com/kb/HT213488Release Notes, Third Party Advisory

Published

Apr 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1375Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-1376Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-1377Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-1378Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-1379URL Restriction Bypass in GitHub repository plantuml/plantum…9.1
• CVE-2022-1380Stored Cross Site Scripting vulnerability in Item name param…5.4
• CVE-2022-1382NULL Pointer Dereference in GitHub repository radareorg/rada…5.5
• CVE-2022-1383Heap-based Buffer Overflow in GitHub repository radareorg/ra…6.1
• CVE-2022-1384Mattermost version 6.4.x and earlier fails to properly check…8.8
• CVE-2022-1385Mattermost 6.4.x and earlier fails to properly invalidate pe…4.6
• CVE-2022-1386The Fusion Builder WordPress plugin before 3.6.2, used in th…9.8
• CVE-2022-1387The No Future Posts WordPress plugin through 1.4 does not es…4.8