CVE-2024-43790

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern is displayed at the bottom of the screen in a buffer (msgbuf). When right-left mode (:set rl) is enabled, the search pattern is reversed. This happens by allocating a new buffer. If the search pattern contains some ASCII NUL characters, the buffer allocated will be smaller than the original allocated buffer (because for allocating the reversed buffer, the strlen() function is called, which only counts until it notices an ASCII NUL byte ) and thus the original length indicator is wrong. This causes an overflow when accessing characters inside the msgbuf by the previously (now wrong) length of the msgbuf. The issue has been fixed as of Vim patch v9.1.0689.

• CWE-122

• https://github.com/vim/vim/commit/cacb6693c10bb19f28a50eca47bcPatch
• https://github.com/vim/vim/security/advisories/GHSA-v2x2-cjcg-f9jmVendor Advisory
• https://security.netapp.com/advisory/ntap-20240920-0005/Third Party Advisory

Published

Aug 22, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43784lakeFS is an open-source tool that transforms object storage…5.7
• CVE-2024-43785gitoxide An idiomatic, lean, fast & safe pure Rust implement…2.5
• CVE-2024-43787Hono is a Web application framework that provides support fo…5
• CVE-2024-43788Webpack is a module bundler. Its main purpose is to bundle J…6.1
• CVE-2024-43789Discourse is an open source platform for community discussio…4.3
• CVE-2024-4379The Premium Addons for Elementor plugin for WordPress is vul…5.4
• CVE-2024-43791RequestStore provides per-request global storage for Rack. T…7.8
• CVE-2024-43792Halo is an open source website building tool. A security vul…6.1
• CVE-2024-43793Halo is an open source website building tool. A security vul…6.4
• CVE-2024-43794OpenSearch Dashboards Security Plugin adds a configuration m…6.1
• CVE-2024-43795OpenC3 COSMOS provides the functionality needed to send comm…6.1
• CVE-2024-43796Express.js minimalist web framework for node. In express < 4…4.7