CVE-2026-57454 Details
Description
Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.
A vulnerability in Vim text editor versions 9.2.0320 prior to 9.2.0679 allows for an out-of-bounds read caused by improperly validated virtual-text properties in undo or swap files. When such a file is opened, Vim can read virtual text data without proper bounds checking, potentially leading to a crash or disclosure of adjacent heap memory. This issue arises because the virtual-text offset can point outside the valid property data, a scenario not adequately checked before the data is accessed.
Users should update to Vim version 9.2.0679 or later, and avoid loading undo files from untrusted sources.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vim vim | >= 9.2.0320, < 9.2.0679 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 26, 2026 | CVE Modified | CISA-ADP |
| Jun 26, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | [email protected] |