PT-2026-6809 · Vim+4 · Vim+4
CVSS v3.1
6.6
Medium
| Vector | AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 9.1.2132
Description
Vim, an open source command line text editor, contains a heap buffer overflow in its tag file resolution logic when processing the 'helpfile' option. The issue resides in the
get tagfname() function within src/tag.c. The STRCPY() function is used to copy the user-controlled 'helpfile' option value into a fixed-size heap buffer without sufficient bounds checking, leading to a potential overflow.Recommendations
Update to Vim version 9.1.2132 or later.
Exploit
Fix
DoS
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Red Os
Rocky Linux
Ubuntu
Vim