CVE-2022-1674: Apple macOS

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.

Affected products

• Apple macOS: before 13.0 (fixed in 13.0)
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Vim Vim: before 8.2.4938 (fixed in 8.2.4938)

Published 2022-05-12. Last modified 2026-10-08.