CVE-2025-55158: Vim double-free vulnerability during Vim9 script import operations
Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in Vim’s internal typed value (typvalT) management. Specifically, the cleartv() function may attempt to free memory that has already been deallocated, due to improper lifetime handling in the handleimport / eximport code paths. The vulnerability can only be triggered if a user explicitly opens and executes a specially crafted Vim script. This issue has been patched in version 9.1.1406.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55158?
CVE-2025-55158 has been classified as a high-severity vulnerability due to its potential to cause significant disruption through double-free errors.
How do I fix CVE-2025-55158?
To fix CVE-2025-55158, users should upgrade their Vim installation to version 9.1.1406 or later.
Which versions of Vim are affected by CVE-2025-55158?
CVE-2025-55158 affects Vim versions from 9.1.1231 to before 9.1.1406.
What type of vulnerability is CVE-2025-55158?
CVE-2025-55158 is a memory management vulnerability that results from double-free errors during Vim9 script import operations.
What are the risks associated with CVE-2025-55158?
Exploitation of CVE-2025-55158 can lead to application crashes, data corruption, or potentially remote code execution.