CVE-2025-24014

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui...

PT-2025-5260 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1043 Description: A segmentation fault was found in Vim. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function th...

Vim 9.1.1003 (GHSA-5rgf-26wj-48v8)

The version of Vim installed on the remote host is prior to 9.1.1003. It is, therefore, affected by a vulnerability as referenced in the GHSA-5rgf-26wj-48v8 advisory. - When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-1066)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2025-1049)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave...

Vim 安全漏洞

Vim is a cross-platform text editor from the Vim open source. A security vulnerability exists in Vim versions prior to 9.1.1003, which stems from failing to properly end visual mode when switching with the :all command in visual mode, which can result in a heap buffer overflow...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2025-1033)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2025-1016)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave...

PT-2025-4371

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.1003 Description The issue is related to a heap-buffer overflow in Vim when switching to other buffers using the :all command while visual mode is still active. This occurs because Vim does not properly end visual mod...

Amazon Linux 2 : vim (ALAS-2024-2711)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2711 advisory. Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in t...

USN-7131-1: Vim vulnerability

It was discovered that Vim incorrectly handled memory when closing a buffer, leading to use-after-free. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Vim vulnerability (USN-7131-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7131-1 advisory. It was discovered that Vim incorrectly handled memory when closing a buffer, leading to...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2931)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling.When adding a new file to the argument list, this...

USN-7048-2: Vim vulnerability

USN-7048-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflow. An attacker could possibly use this...

Ubuntu 14.04 LTS : Vim vulnerability (USN-7048-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7048-2 advisory. USN-7048-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 14.04 LTS. Tenable has extracted the preceding description block...

CVE-2024-47814

Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user...

USN-7048-1: Vim vulnerability

Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflow. An attacker could possibly use this issue to cause a denial of service...

OESA-2024-2115 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

USN-6993-1 vim vulnerabilities

It was discovered that Vim incorrectly handled memory when closing a window, leading to a double-free vulnerability. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user...

Vim 安全漏洞

Vim is Vim open source a cross-platform text editor . A buffer overflow vulnerability exists in Vim. The vulnerability stems from a boundary error when the application handles untrusted input. A remote attacker can exploit the vulnerability to execute arbitrary code on the system or cause a denia...