CVE-2021-3872

vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap-based buffer o...

CVE-2021-3872 is fixed in 14 products on 1 platform, first by vim 2:8.1.2269-1ubuntu5.4, released November 5, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0149
74th percentile

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap-based buffer overflow in win_redr_status() in drawscreen.c (CVE-2021-3872) * vim: illegal memory access in find_start_brace() in cindent.c when C-indenting (CVE-2021-3984) * vim: heap-based buffer overflow in find_help_tags() in help.c (CVE-2021-4019) * vim: use-after-free in win_linetabsize() (CVE-2021-4192) * vim: out-of-bound read in getvcol() (CVE-2021-4193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
vim · Debian 11.6 (bullseye) 2:8.2.2434-3+deb11u2 DLA-4097-1 Mar 30, 2025
vim · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim · rocky 8 2:8.0.1763-16.el8_5.4 RLSA-2022:0366 Feb 1, 2022
vim-X11 · RHEL 8 2:8.0.1763-16.el8_5.4 RHSA-2022:0366 Feb 1, 2022
vim-X11 · almalinux 8 2:8.0.1763-16.el8_5.13 ALSA-2022:0366 Feb 1, 2022
vim-X11 · ol 8 2:8.0.1763-16.0.1.el8_5.4 ELSA-2022-0366 Feb 3, 2022
vim-athena · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-athena 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-athena · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-athena 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-common · RHEL 8 2:8.0.1763-16.el8_5.4 RHSA-2022:0366 Feb 1, 2022
vim-common · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-common 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-common · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-common 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-common · almalinux 8 2:8.0.1763-16.el8_5.13 ALSA-2022:0366 Feb 1, 2022
vim-common · ol 8 2:8.0.1763-16.0.1.el8_5.4 ELSA-2022-0366 Feb 3, 2022
vim-enhanced · RHEL 8 2:8.0.1763-16.el8_5.4 RHSA-2022:0366 Feb 1, 2022
vim-enhanced · almalinux 8 2:8.0.1763-16.el8_5.13 ALSA-2022:0366 Feb 1, 2022
vim-enhanced · ol 8 2:8.0.1763-16.0.1.el8_5.4 ELSA-2022-0366 Feb 3, 2022
vim-filesystem · RHEL 8 2:8.0.1763-16.el8_5.4 RHSA-2022:0366 Feb 1, 2022
vim-filesystem · almalinux 8 2:8.0.1763-16.el8_5.13 ALSA-2022:0366 Feb 1, 2022
vim-filesystem · ol 8 2:8.0.1763-16.0.1.el8_5.4 ELSA-2022-0366 Feb 3, 2022
vim-gtk · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-gtk 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-gtk · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-gtk 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-gtk3 · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-gtk3 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-gtk3 · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-gtk3 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-gui-common · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-gui-common 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-gui-common · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-gui-common 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-minimal · RHEL 8 2:8.0.1763-16.el8_5.4 RHSA-2022:0366 Feb 1, 2022
vim-minimal · almalinux 8 2:8.0.1763-16.el8_5.13 ALSA-2022:0366 Feb 1, 2022
vim-minimal · ol 8 2:8.0.1763-16.0.1.el8_5.4 ELSA-2022-0366 Feb 3, 2022
vim-nox · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-nox 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-nox · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-nox 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-runtime · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-runtime 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-runtime · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-runtime 2:8.2.3565-1ubuntu2 Nov 5, 2021
vim-tiny · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 vim-tiny 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
vim-tiny · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 vim-tiny 2:8.2.3565-1ubuntu2 Nov 5, 2021
xxd · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.4 xxd 2:8.1.2269-1ubuntu5.4 Nov 5, 2021
xxd · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3565-1ubuntu2 xxd 2:8.2.3565-1ubuntu2 Nov 5, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.