Most recent entries from all

CVE-2026-25749 — Heap Overflow in Vim

2026-10-03T09:02:30.831788+00:00

Affected: vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.

RHSA-2026:4442 — security update for vim

2026-10-03T09:02:30.831887+00:00

security update for vim

RHSA-2026:6502 — Red Hat Security Advisory: vim security update

2026-10-03T09:02:30.831913+00:00

vim: Vim: Arbitrary code execution via 'helpfile' option processing vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin vim: Vim: Denial of service and information disclosure via crafted swap file vim: Vim: Arbitrary code execution via command injection in glob() function