vim is vulnerable to Heap-based Buffer Overflow
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "10.15"
},
{
"fixed": "10.15.7"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-NA"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020\\-001"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020\\-005"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020\\-007"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-001"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-002"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-003"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-006"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-007"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-008"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2022\\-001"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2022\\-002"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2022\\-003"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2022\\-004"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-004:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-supplemental_update"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "11.0"
},
{
"fixed": "11.6.6"
},
{
"introduced": "12.0"
},
{
"fixed": "12.3"
}
],
"cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "34"
}
],
"cpe": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "35"
}
],
"cpe": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
}
]
}{
"source": [
"CPE_FIELD",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "8.2.3847"
}
],
"cpe": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-4136.json"
[
{
"target": {
"file": "src/version.c"
},
"signature_version": "v1",
"source": "https://github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264",
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2021-4136-18101af1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"257774907349059393134006854186891468860",
"45716829860378309183288075804567755669",
"231448305372397261277011994394096141601"
]
}
},
{
"deprecated": false,
"signature_version": "v1",
"source": "https://github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264",
"signature_type": "Line",
"target": {
"file": "src/eval.c"
},
"id": "CVE-2021-4136-20ba536f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280047830164751098076941178172329230418",
"92219175289300786164560653070564733046",
"259489547437848085220973876666329808019",
"242729232375864854483209156851414925618",
"187951849213599743154250137332637385742",
"282056214007656724358751887358243877687",
"42658567666536694154904735612175870407",
"259731589182581778150275552026621521390",
"327214081668120223610302381659933220494"
]
}
},
{
"target": {
"function": "eval_lambda",
"file": "src/eval.c"
},
"signature_version": "v1",
"source": "https://github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264",
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2021-4136-249f63e8",
"digest": {
"function_hash": "246105492707264093436126853715918838537",
"length": 898.0
}
}
]
"2026-04-12T02:01:28Z"