Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-vim | Aug 8, 2025 | Jan 20, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-vim-commonamazon-linux-ami-2-upgrade-vim-dataamazon-linux-ami-2-upgrade-vim-debuginfoamazon-linux-ami-2-upgrade-vim-enhancedamazon-linux-ami-2-upgrade-vim-filesystemamazon-linux-ami-2-upgrade-vim-minimalamazon-linux-ami-2-upgrade-vim-x11amazon-linux-ami-2-upgrade-xxd | Feb 26, 2025 | Jan 20, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfoamazon-linux-2023-upgrade-xxdamazon-linux-2023-upgrade-xxd-debuginfo | Apr 15, 2025 | Jan 20, 2025 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jan 20, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-vim-commonhuawei-euleros-2_0_sp10-upgrade-vim-enhancedhuawei-euleros-2_0_sp10-upgrade-vim-filesystemhuawei-euleros-2_0_sp10-upgrade-vim-minimal | May 13, 2025 | Jan 20, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-vim-commonhuawei-euleros-2_0_sp11-upgrade-vim-enhancedhuawei-euleros-2_0_sp11-upgrade-vim-filesystemhuawei-euleros-2_0_sp11-upgrade-vim-minimal | Apr 11, 2025 | Jan 20, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-vim-commonhuawei-euleros-2_0_sp12-upgrade-vim-enhancedhuawei-euleros-2_0_sp12-upgrade-vim-filesystemhuawei-euleros-2_0_sp12-upgrade-vim-minimal | May 7, 2025 | Jan 20, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-vim-commonhuawei-euleros-2_0_sp13-upgrade-vim-enhancedhuawei-euleros-2_0_sp13-upgrade-vim-filesystemhuawei-euleros-2_0_sp13-upgrade-vim-minimal | Jun 11, 2025 | Jan 20, 2025 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 20, 2025 |
| Suse | — | suse-upgrade-gvimsuse-upgrade-vimsuse-upgrade-vim-datasuse-upgrade-vim-data-commonsuse-upgrade-vim-smallsuse-upgrade-xxd | Mar 3, 2025 | Jan 20, 2025 |
| Ubuntu | ubuntu-pro-upgrade-vimubuntu-upgrade-vim | Feb 11, 2025 | Jan 20, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jan 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub