Approved changes feed: RSS · Atom
cpe:2.3:a:vifm:vifm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Vifm (09b577eb-33bd-5c43-802c-8bd40ede0d66) |
|---|---|
| Product | Vifm (ba9e198f-8251-5b7a-9f8b-4f9956078612) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110237 |
vulnerable | 2026-11-03 10:16:00.306466 |
Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution
HIGH (7.3)
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands that execute with the victim's privileges.
Published: 2026-10-13T18:50:18.056Z
Updated: 2026-10-17T00:38:50.515Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8997 |
vulnerable | 2026-06-08 08:08:58.792976 |
Heap Buffer Overflow in vifm
vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime check on the length of history entries in release builds, potentially allowing a crafted long path or command in the history to cause memory corruption or application crashes.
Releases from 0.12.1 to 0.14.3 (including) are considered vulnerable. This issue was fixed in commit 23063c7
Published: 2026-05-22T13:26:17.904Z
Updated: 2026-05-22T15:03:29.811Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.