Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-commonUpgrade vim-X11Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhanced | Mar 16, 2026 | Mar 12, 2026 |
| Alpine Linux | — | Upgrade vimUpgrade neovim | Feb 11, 2026 | Feb 6, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-default-editorUpgrade vim-minimalUpgrade vim-debugsourceUpgrade xxdUpgrade vim-enhancedUpgrade xxd-debuginfoUpgrade vim-debuginfoUpgrade vim-filesystemUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-dataUpgrade vim-common | Apr 14, 2026 | Feb 6, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade vim-filesystemUpgrade xxdUpgrade vim-X11Upgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimalUpgrade vim-data | Mar 16, 2026 | Feb 6, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Feb 6, 2026 |
| Redhat_linux | — | Upgrade vim-dataUpgrade vim-enhancedUpgrade vim-filesystemNo solution existsUpgrade vim-debuginfoUpgrade xxd-debuginfoUpgrade vim-X11Upgrade vim-minimal-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-commonUpgrade vim-minimalUpgrade vim-debugsourceUpgrade xxdUpgrade vim-common-debuginfo | Mar 13, 2026 | Feb 6, 2026 |
| Rocky_linux | — | Upgrade vim-X11Upgrade xxd-debuginfoUpgrade vim-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-enhancedUpgrade vim-enhanced-debuginfoUpgrade vim-common-debuginfoUpgrade vim-debugsourceUpgrade vim-minimalUpgrade xxdUpgrade vim-commonUpgrade vim-X11-debuginfo | Mar 16, 2026 | Mar 13, 2026 |
| Ubuntu | — | Upgrade vimUpgrade vim (Ubuntu Pro) | Mar 19, 2026 | Feb 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub