Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-26269 EUVD-2026-7369

Vim has a Netbeans specialKeys Stack Buffer Overflow

Published Feb 13, 2026 · Updated Feb 13, 2026 · Assigned by GitHub_M

Vendor: vim Product: vim Package: vim Package: vim Package: vim Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.

Affected products

VendorProductAffectedFixed
vim vim < 9.1.2148 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 vim 2:9.2.0119-1 —
Debian 13 vim 2:9.1.1230-2+deb13u1 —
Debian 12 vim No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS vim 2:9.1.2141-1ubuntu2 —
Ubuntu 25.10 vim 2:9.1.0967-1ubuntu6.1 —
Ubuntu 24.04 LTS vim 2:9.1.0016-1ubuntu7.10 —
Ubuntu 22.04 LTS vim 2:8.2.3995-1ubuntu2.26 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS vim 2:8.1.2269-1ubuntu5.32+esm2 —
Ubuntu Pro 18.04 LTS vim 2:8.0.1453-1ubuntu1.13+esm14 —
Ubuntu Pro 16.04 LTS vim 2:7.4.1689-3ubuntu1.5+esm29 —
Ubuntu Pro 14.04 LTS vim 2:7.4.052-1ubuntu3.1+esm23 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLES 15 SP6 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLES 15 SP5 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLES 15 SP4 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1
SLES 12 SP5 vim 9.2.0110-17.59.1 SUSE-SU-2026:1051-1
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 vim 9.2.0110-160000.1.1 SUSE-SU-2026:20916-1
SLES for SAP 15 SP6 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLES for SAP 15 SP5 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLES for SAP 15 SP4 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1
SLES 16.0 vim 9.2.0110-160000.1.1 SUSE-SU-2026:20916-1
SLE Micro 6.2 vim 9.2.0110-160000.1.1 SUSE-SU-2026:20765-1, SUSE-SU-2026:20759-1
SLE Micro 6.1 vim 9.2.0110-slfo.1.1_1.1 SUSE-SU-2026:20738-1
SLE Micro 6.0 vim 9.2.0045-1.1 SUSE-SU-2026:20717-1
SLE Micro 5.5 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLE Micro 5.4 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1
SLE Micro 5.3 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1
SLE Micro 5.2 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1
SLE HPC 15 SP5 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1
SLE HPC 15 SP4 vim 9.2.0110-150000.5.86.1 SUSE-SU-2026:1095-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 vim 9.2.0110-160000.1.1 openSUSE-SU-2026:20403-1
openSUSE Leap 15.6 vim 9.2.0110-150500.20.43.1 SUSE-SU-2026:0910-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 xxd +6 2:9.2.240-1.amzn2023.0.2 ALAS2023-2026-1584

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 vim 9.2.0088-1 —
Azure Linux 2 (CBL-Mariner) vim 9.2.0088-1 —

Advisories 12

References