Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.
CVSS Details
- CVSS 4.0 Base Score: 8.5 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 19, 2026 | Aug 11, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-enhanced-debuginfoUpgrade vim-debuginfoUpgrade vim-filesystemUpgrade vim-default-editorUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-dataUpgrade vim-debugsourceUpgrade vim-minimalUpgrade xxdUpgrade vim-enhancedUpgrade vim-common | Sep 1, 2026 | Aug 11, 2026 |
| Redhat_linux | — | No solution existsUpgrade vim-minimal-debuginfoUpgrade vim-commonUpgrade xxdUpgrade xxd-debuginfoUpgrade vim-dataUpgrade vim-debuginfoUpgrade vim-X11Upgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-enhanced-debuginfoUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-X11-debuginfoUpgrade vim-common-debuginfo | Aug 18, 2026 | Aug 11, 2026 |
| Rocky_linux | — | Upgrade vim-minimal-debuginfoUpgrade xxdUpgrade vim-common-debuginfoUpgrade vim-X11Upgrade vim-X11-debuginfoUpgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-debuginfoUpgrade xxd-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade vim-common | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade xxdUpgrade vim-tiny (Ubuntu Pro)Upgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-gtkUpgrade vim-common (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-tinyUpgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-noxUpgrade vim-athenaUpgrade vim-gtk (Ubuntu Pro)Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade vim-gnome (Ubuntu Pro)Upgrade vim-athena-py2 (Ubuntu Pro)Upgrade vimUpgrade vim-commonUpgrade xxd (Ubuntu Pro)Upgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-motifUpgrade vim-gui-common (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-gui-commonUpgrade vim-gtk3 (Ubuntu Pro) | Aug 23, 2026 | Aug 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Aug 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub