cve/2022/CVE-2022-1674.md

CVE-2022-1674

Description

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.

POC

Reference

• http://seclists.org/fulldisclosure/2022/Oct/41
• https://huntr.dev/bounties/a74ba4a4-7a39-4a22-bde3-d2f8ee07b385

Github

• https://github.com/ARPSyndicate/cvemon