CVE-2021-3973

HIGH

vim < 8.2.3611 - Heap-based Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-3973. PoCs published by cemonatk.

AI-analyzed exploit summary This repository contains a detailed technical analysis of CVE-2021-3973, a heap-based buffer overflow in Vim. It includes a stack trace from AddressSanitizer, references to patches, and a description of the vulnerability's impact.

Description

vim is vulnerable to Heap-based Buffer Overflow

Exploits (1)

github WRITEUP 3 stars
by cemonatk · poc
https://github.com/cemonatk/onefuzzyway/tree/main/CVEs/vim/CVE-2021-3973.md

This repository contains a detailed technical analysis of CVE-2021-3973, a heap-based buffer overflow in Vim. It includes a stack trace from AddressSanitizer, references to patches, and a description of the vulnerability's impact.

Classification
Writeup 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Vim (master branch, specifically commit 58ef8a3)
No auth needed
Prerequisites: Vim compiled with AddressSanitizer · POC file (not included in the repository)
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/ce6e8609-77c6-4e17-b9fc-a2e5abed052e
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2022/01/15/1
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202208-32

Scores

CVSS v3 7.8
EPSS 0.0167
EPSS Percentile 73.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-122 CWE-787
Status published
Products (4)
debian/debian_linux 9.0
fedoraproject/fedora 34
fedoraproject/fedora 35
vim/vim < 8.2.3611
Published Nov 19, 2021
Tracked Since Feb 18, 2026