PT-2024-6175 · Vim+3 · Vim+3

Suyueguo · Published 2024-08-22 · Updated 2025-08-18 · CVE-2024-43790

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Vim versions prior to v9.1.0689

Description The issue is related to a buffer overflow in the Vim text editor. When the search-count message is disabled and right-left mode is enabled, the search pattern is reversed and allocated in a new buffer. If the search pattern contains ASCII NUL characters, the allocated buffer will be smaller than the original, causing an overflow when accessing characters inside the buffer. This can potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to v9.1.0689, update to Vim patch v9.1.0689 or later to resolve the issue. As a temporary workaround, consider disabling the right-left mode (:set norl) when performing searches to minimize the risk of exploitation. Additionally, avoid using search patterns that contain ASCII NUL characters until the issue is resolved.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2024-07095

CVE-2024-43790

ECHO-5B33-F1A7-5161

GHSA-V2X2-CJCG-F9JM

OPENSUSE-SU-2025_0723-1

SUSE-SU-2025:0722-1

SUSE-SU-2025:0723-1

SUSE-SU-2025:0724-1

SUSE-SU-2025:20128-1

SUSE-SU-2025_0722-1

SUSE-SU-2025_0723-1

Affected Products

Debian

Red Os

Suse

Vim

References · 49

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43790.json · Exploit
• https://github.com/vim/vim/security/advisories/GHSA-v2x2-cjcg-f9jm · Vendor Advisory
• https://github.com/vim/vim/commit/cacb6693c10bb19f28a50eca47bc · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2024-43790 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0724-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43790 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43790 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0723-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-43790 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20128-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43790 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-43790 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43790 · Security Note
• https://bdu.fstec.ru/vul/2024-07095 · Security Note