CVE-2022-1154: Debian Linux

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

Affected products

  • Debian Debian Linux: version 9.0 only; version 10.0 only
  • Fedoraproject Fedora: version 34 only; version 35 only
  • Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
  • Vim Vim: before 8.2.4646 (fixed in 8.2.4646)

Published 2022-03-30. Last modified 2026-06-17.