Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Mar 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade vim-dataUpgrade vim-commonUpgrade xxdUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-debuginfoUpgrade vim-X11Upgrade vim-filesystem | Apr 17, 2025 | Mar 13, 2025 |
| Amazon_linux_2023 | — | Upgrade vim-minimal-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade vim-dataUpgrade xxd-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-debugsourceUpgrade vim-enhancedUpgrade vim-debuginfoUpgrade vim-filesystem | Apr 15, 2025 | Mar 13, 2025 |
| Debian | — | No solution existsUpgrade vim | May 15, 2025 | Mar 13, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade vim | Mar 14, 2025 | Mar 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhancedUpgrade vim-common | Jul 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-filesystemUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-minimal | Jun 13, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimal | Jun 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-commonUpgrade vim-filesystem | Jul 1, 2025 | Mar 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 13, 2025 |
| Suse | — | Upgrade gvimUpgrade vim-data-commonUpgrade vim-dataUpgrade vimUpgrade vim-smallUpgrade xxd | Dec 5, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub