VulnerabilityModified

CVE-2022-2231

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

MEDIUM 5.5EPSS 1.29%

Does this matter?

Lower severity and a low EPSS score (1.29%). Track it; it rarely justifies an emergency change on its own.

Description

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: 1.29% probability · 70th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-476
Affected: vim/vim · fedoraproject/fedora
Source: security@huntr.dev

EPSS trend

EPSS 1.3% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

https://github.com/vim/vim/commit/79481367a457951aabd9501b510fd7e3eb29c3d8Patch, Third Party Advisory
https://huntr.dev/bounties/8dae6ab4-7a7a-4716-a65c-9b090fa057b5Exploit, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
https://security.gentoo.org/glsa/202208-32Third Party Advisory
https://security.gentoo.org/glsa/202305-16
https://github.com/vim/vim/commit/79481367a457951aabd9501b510fd7e3eb29c3d8Patch, Third Party Advisory
https://huntr.dev/bounties/8dae6ab4-7a7a-4716-a65c-9b090fa057b5Exploit, Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/
https://security.gentoo.org/glsa/202208-32Third Party Advisory
https://security.gentoo.org/glsa/202305-16

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.