CVE-2023-2610: Integer Overflow or Wraparound in vim/vim

Reference Links

• https://support.apple.com/en-us/HT213843 (Advisory)
• https://support.apple.com/en-us/HT213844 (Advisory)
• https://support.apple.com/en-us/HT213845 (Advisory)
• https://huntr.dev/bounties/31e67340-935b-4f6c-a923-f7246bc29c7d
• https://github.com/vim/vim/commit/ab9a2d884b3a4abe319606ea95a5a6d6b01cd73a
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/
• https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html
• https://support.apple.com/kb/HT213844
• https://support.apple.com/kb/HT213845
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/

Parent vulnerabilities

(Appears in the following advisories)

• HT213843
• HT213844
• HT213845

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-40439
• CVE-2023-38616
• CVE-2023-34425
• CVE-2023-38580
• CVE-2023-36862
• CVE-2023-32364
• CVE-2023-35983
• CVE-2023-40392
• CVE-2023-42828
• CVE-2023-34241
• CVE-2023-28319
• CVE-2023-28320
• CVE-2023-28321
• CVE-2023-28322
• CVE-2023-32416
• CVE-2023-40437
• CVE-2023-32418
• CVE-2023-36854
• CVE-2022-3970
• CVE-2023-28200
• CVE-2023-38590
• CVE-2023-38598
• CVE-2023-36495
• CVE-2023-37285
• CVE-2023-38604
• CVE-2023-32734
• CVE-2023-32441
• CVE-2023-38261
• CVE-2023-38424
• CVE-2023-38425
• CVE-2023-32381
• CVE-2023-32433
• CVE-2023-35993
• CVE-2023-38410
• CVE-2023-38606
• CVE-2023-38603
• CVE-2023-38565
• CVE-2023-38593
• CVE-2023-40440
• CVE-2023-38258
• CVE-2023-38421
• CVE-2023-1916
• CVE-2023-38571
• CVE-2023-29491
• CVE-2023-38601
• CVE-2023-32444
• CVE-2023-2953
• CVE-2023-42829
• CVE-2023-38609
• CVE-2023-38259
• CVE-2023-38564
• CVE-2023-38602
• CVE-2023-42831
• CVE-2023-32442
• CVE-2023-32443
• CVE-2023-42832
• CVE-2023-32429
• CVE-2023-1801
• CVE-2023-32654
• CVE-2023-2426
• CVE-2023-2609
• CVE-2023-2610
• CVE-2023-38608
• CVE-2023-38605
• CVE-2023-40397
• CVE-2023-38572
• CVE-2023-38599
• CVE-2023-32445
• CVE-2023-38592
• CVE-2023-38594
• CVE-2023-38595
• CVE-2023-38600
• CVE-2023-38611
• CVE-2023-37450
• CVE-2023-42866
• CVE-2023-38597
• CVE-2023-38133
• CVE-2023-40442
• CVE-2023-41990
• CVE-2023-32422

Frequently Asked Questions

• What is the severity of CVE-2023-2610?

  The severity of CVE-2023-2610 is high with a CVSS score of 7.8.

• What is the affected software for CVE-2023-2610?

  The affected software for CVE-2023-2610 is Vim Vim version up to exclusive 9.0.1532.

• What is the vulnerability description of CVE-2023-2610?

  CVE-2023-2610 is an Integer Overflow or Wraparound vulnerability in the GitHub repository vim/vim prior to 9.0.1532.

• What is the fix for CVE-2023-2610?

  The fix for CVE-2023-2610 can be found in the commit ab9a2d884b3a4abe319606ea95a5a6d6b01cd73a in the GitHub repository vim/vim.

• What is the CWE category for CVE-2023-2610?

  The CWE category for CVE-2023-2610 is CWE-190.