CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

• CWE-122

• https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97bPatch, Third Party Advisory
• https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://security.gentoo.org/glsa/202305-16
• https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97bPatch, Third Party Advisory
• https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
• https://security.gentoo.org/glsa/202208-32Third Party Advisory
• https://security.gentoo.org/glsa/202305-16

Published

Jun 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22064Possible buffer over read due to lack of size validation whi…7.5
• CVE-2022-22065Out of bound read in WLAN HOST due to improper length check …7.5
• CVE-2022-22066Memory corruption occurs while processing command received f…7.8
• CVE-2022-22067Potential memory leak in modem during the processing of NSA …7.8
• CVE-2022-22068kernel event may contain unexpected content which is not gen…7.8
• CVE-2022-22069Devices with keyprotect off may store unencrypted keybox in …7.8
• CVE-2022-22070Memory corruption in audio due to lack of check of invalid r…7.8
• CVE-2022-22071Possible use after free when process shell memory is freed u…7.8
• CVE-2022-22072Buffer overflow can occur due to improper validation of NDP …7.8
• CVE-2022-22074Memory Corruption during wma file playback due to integer ov…7.8
• CVE-2022-22075Information Disclosure in Graphics during GPU context switch…5.5
• CVE-2022-22076information disclosure due to cryptographic issue in Core du…5.5