PT-2025-5260 · Vim+6 · Vim+6
Fizz-Is-On-The-Way
·
Published
2025-01-20
·
Updated
2025-10-09
·
CVE-2025-24014
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 9.1.1043
Description
A segmentation fault was found in Vim. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling may be triggering a redraw, which will access the
ScreenLines pointer, even though this variable hasn't been allocated.Recommendations
For Vim versions prior to 9.1.1043, update to version 9.1.1043 or later to resolve the issue. As a temporary workaround, consider avoiding the use of silent Ex mode (-s -e) until the update is applied.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Red Os
Suse
Ubuntu
Vim