Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Mar 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xxdUpgrade vim-dataUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-X11Upgrade vim-debuginfoUpgrade vim-filesystem | Apr 17, 2025 | Mar 13, 2025 |
| Amazon_linux_2023 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-commonUpgrade vim-debuginfoUpgrade vim-default-editorUpgrade vim-dataUpgrade xxd-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade vim-enhanced-debuginfo | Apr 15, 2025 | Mar 13, 2025 |
| Debian | — | Upgrade vimNo solution exists | May 15, 2025 | Mar 13, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade vim | Mar 14, 2025 | Mar 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystem | Jul 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-commonUpgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhanced | Jun 13, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-commonUpgrade vim-filesystem | Jun 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-common | Jul 1, 2025 | Mar 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 13, 2025 |
| Suse | — | Upgrade gvimUpgrade vim-smallUpgrade vimUpgrade vim-dataUpgrade vim-data-commonUpgrade xxd | Dec 5, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub