CVE-2026-73072

CVE-2026-73072 affects Vim prior to 9.2.0846. The vulnerability arises in set_sofo() within src/spellfile.c, which reuses sl_sal_first[] without resetting values left by set_sal_first(). A crafted spell file that places an SN_SAL section before an SN_SOFO section can cause under-counted mapping l...