CVE-2022-1620: Apple macOS

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.

Affected products

• Apple macOS: before 13.0 (fixed in 13.0)
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Vim Vim: before 8.2.4901 (fixed in 8.2.4901)

Published 2022-05-08. Last modified 2026-10-08.