Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Jan 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhancedUpgrade vim-X11Upgrade vim-dataUpgrade xxdUpgrade vim-debuginfoUpgrade vim-common | Feb 26, 2025 | Jan 20, 2025 |
| Amazon_linux_2023 | — | Upgrade vim-debugsourceUpgrade xxdUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-enhanced-debuginfoUpgrade vim-dataUpgrade vim-default-editorUpgrade vim-debuginfoUpgrade xxd-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-filesystem | Apr 15, 2025 | Jan 20, 2025 |
| Debian | — | No solution existsUpgrade vim | May 15, 2025 | Jan 20, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-common | May 13, 2025 | Jan 20, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-common | Apr 11, 2025 | Jan 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-minimal | May 7, 2025 | Jan 20, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystem | Jun 11, 2025 | Jan 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 20, 2025 |
| Suse | — | Upgrade gvimUpgrade vim-dataUpgrade vim-data-commonUpgrade xxdUpgrade vimUpgrade vim-small | Mar 3, 2025 | Jan 20, 2025 |
| Ubuntu | — | Upgrade vimUpgrade vim (Ubuntu Pro) | Feb 11, 2025 | Jan 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub