Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Mar 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade vim-minimalUpgrade xxdUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-X11Upgrade vim-filesystem | Apr 17, 2025 | Mar 13, 2025 |
| Amazon_linux_2023 | — | Upgrade vim-debugsourceUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-debuginfoUpgrade vim-default-editorUpgrade vim-filesystemUpgrade xxd-debuginfoUpgrade xxdUpgrade vim-dataUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade vim-minimal-debuginfo | Apr 15, 2025 | Mar 13, 2025 |
| Debian | — | Upgrade vimNo solution exists | May 15, 2025 | Mar 13, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade vim | Mar 14, 2025 | Mar 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced | Jul 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-filesystem | Jun 13, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystem | Jun 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced | Jul 1, 2025 | Mar 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 13, 2025 |
| Suse | — | Upgrade vimUpgrade gvimUpgrade vim-dataUpgrade vim-data-commonUpgrade vim-smallUpgrade xxd | Dec 5, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub