CVE-2023-2426
CVE-2023-2426 is a medium-severity vulnerability in Neovim with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-823.
Key facts
- Severity: Medium (CVSS 3.x base score 5.3)
- EPSS exploit prediction: 0% (33rd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-823
- Affected product: Neovim
- Published:
- Last modified:
Description
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
Frequently asked questions
- What is CVE-2023-2426?
- Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
- How severe is CVE-2023-2426?
- CVE-2023-2426 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability low.
- Is CVE-2023-2426 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (33rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-2426?
- CVE-2023-2426 primarily affects Neovim. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-2426?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-2426 published?
- CVE-2023-2426 was published on 2023-04-29 and last updated on 2026-09-24.
References
- https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b
- https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
Affected products (6)
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:11.7.9:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:12.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:neovim:neovim:*:*:*:*:*:*:*:*
- cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
More vulnerabilities in Neovim
- CVE-2019-12735 — High (CVSS 8.6): getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via…
- CVE-2023-5535 — High (CVSS 7.8): Use After Free in GitHub repository vim/vim prior to v9.0.2010.
- CVE-2023-4781 — High (CVSS 7.8): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
- CVE-2023-4752 — High (CVSS 7.8): Use After Free in GitHub repository vim/vim prior to 9.0.1858.
- CVE-2023-4750 — High (CVSS 7.8): Use After Free in GitHub repository vim/vim prior to 9.0.1857.
- CVE-2023-4733 — High (CVSS 7.8): Use After Free in GitHub repository vim/vim prior to 9.0.1840.
Other CWE-823 vulnerabilities
- CVE-2023-43553 — Critical (CVSS 9.8): Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
- CVE-2026-46244 — Critical (CVSS 9.1): In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff…
- CVE-2026-72642 — High (CVSS 8.8): The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model…
- CVE-2025-27059 — High (CVSS 8.8): Memory corruption while performing SCM call.
- CVE-2022-0729 — High (CVSS 8.8): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
- CVE-2017-20211 — High (CVSS 8.6): UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the…