Skip to content

overflow in nv_z_get_count

Low
chrisbra published GHSA-59gw-c949-6phq Nov 16, 2023

Package

Vim (Vim)

Affected versions

<v9.0.2109

Patched versions

v9.0.2109

Description

overflow in nv_z_get_count

Date: 16.11.2023
Severity: Low

When getting the count for a normal mode z command, it may overflow for large
counts given. So let's verify that the result can be safely stored, else abort
the z command.

Impact is low, user interaction is required and a crash may not even happen.

The Vim project would like to thank Fabian Toepfer for reporting this issue
which is now fixed in Vim patch 9.0.2109.

Severity

Low
2.8
/ 10

CVSS base metrics

Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CVE ID

CVE-2023-48234

Weaknesses

No CWEs