CVE-2022-1621: Apple macOS

High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

Affected products

• Apple macOS: before 13.0 (fixed in 13.0)
• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Vim Vim: before 8.2.4919 (fixed in 8.2.4919)

Published 2022-05-10. Last modified 2026-06-17.