CVE-2021-3927

HIGH

vim < 8.2.3581 - Heap-based Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-3927. PoCs published by cemonatk.

AI-analyzed exploit summary This repository contains a detailed technical analysis of CVE-2021-3927, a heap-based buffer overflow vulnerability in Vim. It includes references to the original report, sanitizer output, and steps to reproduce the issue.

Description

vim is vulnerable to Heap-based Buffer Overflow

Exploits (1)

github WRITEUP 3 stars
by cemonatk · poc
https://github.com/cemonatk/onefuzzyway/tree/main/CVEs/vim/CVE-2021-3927.md

This repository contains a detailed technical analysis of CVE-2021-3927, a heap-based buffer overflow vulnerability in Vim. It includes references to the original report, sanitizer output, and steps to reproduce the issue.

Classification
Writeup 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Vim (master branch, specifically commit 2446ec9)
No auth needed
Prerequisites: Vim compiled with AddressSanitizer · POC file (referenced but not included)
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (9)

Core 9
Core References
Mailing List, Third Party Advisory mailing-list
http://www.openwall.com/lists/oss-security/2022/01/15/1
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202208-32
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html

Scores

CVSS v3 7.8
EPSS 0.0159
EPSS Percentile 72.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-122 CWE-787
Status published
Products (6)
debian/debian_linux 9.0
debian/debian_linux 10.0
fedoraproject/fedora 33
fedoraproject/fedora 34
fedoraproject/fedora 35
vim/vim < 8.2.3581
Published Nov 05, 2021
Tracked Since Feb 18, 2026