Skip to content

overflow in get_number

Low
chrisbra published GHSA-pr4c-932v-8hx5 Nov 16, 2023

Package

Vim (Vim)

Affected versions

<v9.0.2111

Patched versions

v9.0.2111

Description

overflow in get_number

Date: 16.11.2023
Severity: Low

When using the z= command, we may overflow the count with values larger
than MAX_INT. So verify that we do not overflow and in case when an
overflow is detected, simply return 0

Impact is low, user interaction is required and a crash may not even happen.

The Vim project would like to thank Fabian Toepfer for reporting this issue
which is now fixed in Vim patch 9.0.2111

Severity

Low
2.8
/ 10

CVSS base metrics

Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CVE ID

CVE-2023-48236

Weaknesses

No CWEs