Skip to content
OpenAdvisories
Medium USN-7220-1 1 CVE

vim vulnerability

Published Jan 21, 2025 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Vim incorrectly handled memory when closing buffers
with the visual mode active. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS vim 2:8.1.2269-1ubuntu5.30
Ubuntu · 22.04 LTS 22.04:LTS vim 2:8.2.3995-1ubuntu2.22
Ubuntu · 24.04 LTS 24.04:LTS vim 2:9.1.0016-1ubuntu7.6

Vulnerabilities 1

  • Medium 4.2
    CVE-2025-22134

    heap-buffer-overflow with visual mode in Vim < 9.1.1003

    When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-22134