Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2580.json",
"cna_assigner": "@huntrdev",
"cwe_ids": [
"CWE-122"
]
}{
"cpe": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "9.0.0102"
}
],
"source": [
"CPE_FIELD",
"REFERENCES"
]
}[
{
"target": {
"file": "src/version.c"
},
"id": "CVE-2022-2580-55f1de22",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"86329413152245421486478655017984503123",
"35733003738724930009378566001402671441",
"126993635120938562641241245329377216582"
]
}
},
{
"target": {
"function": "ins_comp_get_next_word_or_line",
"file": "src/insexpand.c"
},
"id": "CVE-2022-2580-8187f9f7",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614",
"signature_type": "Function",
"digest": {
"function_hash": "217226391357644461381816413352745113570",
"length": 1497.0
}
},
{
"target": {
"file": "src/insexpand.c"
},
"id": "CVE-2022-2580-8cbc4c64",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"209580768524220550604597932561790841349",
"103952451937943846975017666945908939479",
"246257032935788575946147183236905118526",
"218556101048573430843329805949327963817"
]
}
},
{
"target": {
"file": "src/typval.c"
},
"id": "CVE-2022-2580-e41d857d",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"106447693353747596027475983248396082674",
"291647189978032535165485537561366200299",
"320155611181172000653887300128839164122",
"226226355220650447464754561869640011023",
"32917712667003401982678840754856836449"
]
}
},
{
"target": {
"function": "eval_string",
"file": "src/typval.c"
},
"id": "CVE-2022-2580-ec15f54a",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d",
"signature_type": "Function",
"digest": {
"function_hash": "220560498678372744128473950046889914831",
"length": 2651.0
}
},
{
"target": {
"file": "src/version.c"
},
"id": "CVE-2022-2580-f81fdfaa",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"3585146729960597926598703617518034209",
"259034200916055878618447552872578531185",
"273630205452981705344740028066731220239"
]
}
}
]
"2026-04-20T10:08:31Z"
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2580.json"