Vim < 9.2.1309 Heap Buffer Overflow with Crafted Spell File
Crafted spell file causes Vim to treat SN_SOFO sections as SN_SAL items leading to out-of-bounds read.
Stories per day · 30 days
2 RSS
Relatedcwe-782oss-security2cargo1code-execution1command-execution1command-injection1cwe-941editor1heap-overflow1insecure1omni-completion1rmarkdown1ruby1socket-directory1spell-file1syntax-highlighting1
6 stories, newest first · one card per story
Stories tagged #vim
Insecure Socket Directory in Vim < 9.2.1308
Existing directory used for sockets without owner check allowing potential privilege escalation.
[vim-security] Ex Command Execution via Cargo Quickfix Hooks in Vim < 9.2.1201
Vim before 9.2.1201 can run Ex commands through Cargo quickfix hooks, a medium command-injection flaw.
[vim-security] Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178
Vim before 9.2.1178 can run OS commands via R Markdown syntax highlighting; no CVE yet.
[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090
Vim sign_jump() before v9.2.1090 permits Ex command injection via unescaped buffer names; low-severity patch disclosed by Christian Brabandt.
USN-8679-2: Vim vulnerability
Ubuntu's USN-8679-2 updates Vim for Ubuntu 26.04 LTS, fixing a tags-file handling flaw that could allow arbitrary code execution.