Vim resource management error vulnerability

Vim is a cross-platform text editor from the Vim open source. A resource management error vulnerability exists in Vim versions prior to 9.1.1231 through 9.1.1406, which stems from a double-release issue when dealing with nested tuples, which could lead to memory corruption...

CVE-2025-55158: Double Free

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in Vim’s internal typed value typvalT management. Specifically, the cleartv...

CVE-2025-55157: Use After Free

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

PT-2025-32594

Name of the Vulnerable Software and Affected Versions: Vim versions 9.1.1231 through 9.1.1405 Description: Vim is a command line text editor. Versions from 9.1.1231 to before 9.1.1406 contain a flaw where processing nested tuples during Vim9 script import operations can trigger a double-free in...

OESA-2025-1984 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

OESA-2025-1985 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53905 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1

CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1. An upgraded version of the package is available that resolves this issue...

Azure Linux 3.0 Security Update: vim (CVE-2025-53905)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53905 advisory. - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's...

CBL Mariner 2.0 Security Update: vim (CVE-2025-53905)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53905 advisory. - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's...

ROS-20250807-06

Vulnerability in vim text editor is related to input validation errors when processing directory traversal sequences in the tar.vim plugin. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in vim text editor is related to input validation errors wh...

CBL Mariner 2.0 Security Update: vim (CVE-2025-53906)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53906 advisory. - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's...

Azure Linux 3.0 Security Update: vim (CVE-2025-53906)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53906 advisory. - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's...

Vim has path traversial issue with tar.vim and special crafted tar files

...

Vim has path traversal issue with zip.vim and special crafted zip archives

...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-1864)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-1767)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-1751)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...