Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0049.json",
"cwe_ids": [
"CWE-125"
],
"unresolved_ranges": [
{
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"fixed": "9.0.1143"
}
]
}
],
"cna_assigner": "@huntrdev"
}{
"source": [
"CPE_FIELD",
"REFERENCES"
],
"cpe": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "9.0.1143"
}
]
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0049.json"
"2026-04-28T10:10:46Z"
[
{
"source": "https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c",
"digest": {
"function_hash": "77556544092882343149283188414904619664",
"length": 18036.0
},
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "build_stl_str_hl",
"file": "src/buffer.c"
},
"deprecated": false,
"id": "CVE-2023-0049-19ce687a"
},
{
"source": "https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c",
"digest": {
"line_hashes": [
"146200493773228420153804765641940418619",
"156041115380068192309754516862272149836",
"321685697817843168515950956388845333149",
"118594104800656118922968214681623322127"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "src/version.c"
},
"deprecated": false,
"id": "CVE-2023-0049-2bf6cd4b"
},
{
"source": "https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c",
"digest": {
"line_hashes": [
"22724371544767714106446318518269378080",
"197267310753055046177501059631800473972",
"23086330007008088629153315676579069782",
"69644428349060066499202059024176934521"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "src/buffer.c"
},
"deprecated": false,
"id": "CVE-2023-0049-70e94f17"
}
]