CVE-2026-57454

Name
CVE-2026-57454
Description
Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
security-advisories@github.com https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949
security-advisories@github.com https://github.com/vim/vim/releases/tag/v9.2.0679
security-advisories@github.com https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* vim >= 9.2.0320 < 9.2.0679

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
vim edge-community 9.2.0680-r0 mio <miyopan@e.email> fixed
vim edge-community 9.2.0677-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0663-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0602-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0567-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0514-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0498-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0481-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0452-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0437-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0389-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0357-r0 mio <miyopan@e.email> possibly vulnerable
vim edge-community 9.2.0321-r0 mio <miyopan@e.email> possibly vulnerable
vim 3.24-community 9.2.0680-r0 mio <miyopan@e.email> fixed
vim 3.24-community 9.2.0677-r0 mio <miyopan@e.email> possibly vulnerable
vim 3.24-community 9.2.0663-r0 mio <miyopan@e.email> possibly vulnerable
vim 3.23-main 9.2.0602-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0567-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0514-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0498-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0481-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0452-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0437-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0389-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0357-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
vim 3.23-main 9.2.0321-r0 Celeste <cielesti@protonmail.com> possibly vulnerable