CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.

• CWE-119
• CWE-416

• http://seclists.org/fulldisclosure/2023/Jan/19Third Party Advisory
• https://github.com/vim/vim/commit/d0fab10ed2a86698937e3c3fed2f10bd9bb5e731Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JCW33NOLMELTTTDJH7WGDIFJZ5YEEMK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYEK5RNMH7MVQH6RPBKLSCCA6NMIKHDV/
• https://security.gentoo.org/glsa/202305-16
• https://security.netapp.com/advisory/ntap-20221223-0004/Third Party Advisory
• https://support.apple.com/kb/HT213605Third Party Advisory
• https://vuldb.com/?id.212324Permissions Required, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jan/19Third Party Advisory
• https://github.com/vim/vim/commit/d0fab10ed2a86698937e3c3fed2f10bd9bb5e731Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JCW33NOLMELTTTDJH7WGDIFJZ5YEEMK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYEK5RNMH7MVQH6RPBKLSCCA6NMIKHDV/
• https://security.gentoo.org/glsa/202305-16
• https://security.netapp.com/advisory/ntap-20221223-0004/Third Party Advisory
• https://support.apple.com/kb/HT213605Third Party Advisory
• https://vuldb.com/?id.212324Permissions Required, Third Party Advisory

Published

Oct 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37042Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximpo…9.8
• CVE-2022-37043An issue was discovered in the webmail component in Zimbra C…5.7
• CVE-2022-37044In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/se…6.1
• CVE-2022-37047The component tcprewrite in Tcpreplay v4.4.1 was discovered …7.8
• CVE-2022-37048The component tcprewrite in Tcpreplay v4.4.1 was discovered …7.8
• CVE-2022-37049The component tcpprep in Tcpreplay v4.4.1 was discovered to …7.8
• CVE-2022-37050In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows a…6.5
• CVE-2022-37051An issue was discovered in Poppler 22.07.0. There is a reach…6.5
• CVE-2022-37052A reachable Object::getString assertion in Poppler 22.07.0 a…6.5
• CVE-2022-37053TRENDnet TEW733GR v1.03B01 is vulnerable to Command injectio…9.8
• CVE-2022-37055D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_re…9.8
• CVE-2022-37056D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_re…9.8