Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
Vim (Vi IMproved) ist eine Weiterentwicklung des Texteditors vi.
Vulnerabilities 2
-
Medium 5.3
vim xxd xxd.c main buffer overflow
A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has b…
-
Low 3.3
vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly avai…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-25742
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-p222-mxxm-v36m vom 2025-08-24
https://github.com/advisories/GHSA-p222-mxxm-v36m
-
GitHub Security Advisory GHSA-58rr-chmf-5w2j vom 2025-08-24
https://github.com/advisories/GHSA-58rr-chmf-5w2j