CVE-2022-4293

Published: Dec 5, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

Affected (1)

Products: Vim: Vim

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	Before 9.0.0804

Related CWEs

Floating Point Comparison with Incorrect Operator

The code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.

Incorrect Comparison

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References (8)

https://github.com/vim/vim/commit/cdef1cefa2a440911c727558562f83ed9b00e16b

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/385a835f-6e33-4d00-acce-ac99f3939143

Source: security@huntr.dev

ExploitPatchThird Party Advisory

https://security.gentoo.org/glsa/202305-16

Source: security@huntr.dev

https://security.netapp.com/advisory/ntap-20230203-0007/

Source: security@huntr.dev

https://github.com/vim/vim/commit/cdef1cefa2a440911c727558562f83ed9b00e16b

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/385a835f-6e33-4d00-acce-ac99f3939143

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

https://security.gentoo.org/glsa/202305-16

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20230203-0007/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.