CVE-2026-73072

CVE-2026-73072 affects Vim prior to 9.2.0846. The vulnerability arises in set_sofo() within src/spellfile.c, which reuses sl_sal_first[] without resetting values left by set_sal_first(). A crafted spell file that places an SN_SAL section before an SN_SOFO section can cause under-counted mapping l...

CVE-2026-73072 Vim: Heap Buffer Overflow when Loading a Spell File

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

CVE-2026-73072

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

CVE-2026-73072: Heap-based Buffer Overflow

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...