PT-2026-39222 · Vim+2 · Vim+2

Daniel-Msft · Published 2026-05-08 · Updated 2026-06-09 · CVE-2026-45130

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0450

Description A heap buffer overflow occurs in the read compound() function within src/spellfile.c when loading a specially crafted spell file (.spl) while UTF-8 encoding is active. An attacker-controlled length field in the compound section of the spell file causes a 32-bit signed integer multiplication overflow. This results in the allocation of an undersized buffer for a write loop that executes numerous iterations, leading to a heap overflow. This process can be triggered via a text file modeline that sets the spelllang option, provided a malicious .spl file is present on the runtimepath.

Recommendations Update to version 9.2.0450.

Fix

Heap Based Buffer Overflow

Integer Overflow

Weakness Enumeration

CWE-122

CWE-190

Related Identifiers

CVE-2026-45130

ECHO-DAD7-435C-45C4

OESA-2026-2447

OESA-2026-2448

OESA-2026-2449

OESA-2026-2450

OESA-2026-2472

SUSE-SU-2026:2313-1

USN-8304-1

Affected Products

Linuxmint

Ubuntu

Vim

References · 52

• https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv · Vendor Advisory
• https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-45130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44656 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45130 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42307 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2472 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-45130 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45130 · Security Note
• https://ubuntu.com/security/CVE-2026-44656 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-45130 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8304-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2026-45130 · Vendor Advisory