{"id":"CVE-2023-1175","title":"Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.","summary":"Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-131"],"vendor":"neovim","product":"neovim","affected":["debian_linux = 10.0","debian_linux = 11.0","fedora = 36","fedora = 37","fedora = 38","neovim <= 0.8.3","vim < 9.0.1378"],"patched":["vim 9.0.1378"],"published":"2023-03-04","updated":"2026-09-18","sourceUpdated":"2026-09-18T15:37:59.490","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-1175","references":[{"url":"https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba","label":"security@huntr.dev"},{"url":"https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e","label":"security@huntr.dev"},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","label":"security@huntr.dev"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/","label":"security@huntr.dev"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","label":"security@huntr.dev"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/","label":"security@huntr.dev"},{"url":"https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00448,"epssPercentile":0.3836,"ingestedAt":"2026-09-18T15:44:31.547Z","slug":"CVE-2023-1175","body":"## Overview\n\nIncorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.\n\n## Affected\n\n- `debian_linux = 10.0`\n- `debian_linux = 11.0`\n- `fedora = 36`\n- `fedora = 37`\n- `fedora = 38`\n- `neovim <= 0.8.3`\n- `vim < 9.0.1378`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `vim 9.0.1378`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}