Vim < 9.2.0078 Stack-Buffer-Overflow (GHSA-gmqx-prf2-8mwf)

The version of Vim installed on the remote host is prior to 9.2.0078. It is, therefore, affected by a vulnerability as referenced in the GHSA-gmqx-prf2-8mwf advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in buildstlstrhl when...

DEBIAN-CVE-2026-28422

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in buildstlstrhl when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue...

CVE-2026-28422 Vim has stack-buffer-overflow in build_stl_str_hl()

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in buildstlstrhl when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue...

CVE-2026-28422 Vim has stack-buffer-overflow in build_stl_str_hl()

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in buildstlstrhl when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue...

CLSA-2023-1674814283 Fix CVE(s): CVE-2023-0049

SECURITY UPDATE: Out-of-bounds read in function buildstlstrhl - debian/patches/CVE-2023-0049: Stop reading from buffer at "%0" - CVE-2023-0049...

Vim text editor’s build_stl_str_hl() function vulnerability, allowing an attacker to execute arbitrary code

The vulnerability of the buildstlstrhl function in the Vim text editor is related to the execution of an operation beyond the buffer’s memory limits. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim that originates from an out-of-bounds memory read in the function buildstlstrhl, which can be exploited by an attacker to trigger a denial of service and potentially run code...