CVE-2022-1720: Apple macOS

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

Affected products

• Apple macOS: before 11.7 (fixed in 11.7); from 12.0, before 12.6 (fixed in 12.6)
• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 35 only; version 36 only
• Vim Vim: before 8.2.4956 (fixed in 8.2.4956)

Published 2022-06-20. Last modified 2026-06-17.