CVE-2025-9389: vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
A vulnerability was identified in vim 9.1.0000. Affected is the function memmoveavxunalignederms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not able to reproduce this. One of the users mentions that this appears not to be working, "when coloring is turned on".
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9389?
CVE-2025-9389 is considered a critical vulnerability due to its potential for local exploitation leading to memory corruption.
How do I fix CVE-2025-9389?
To address CVE-2025-9389, update to the latest version of Vim that patches this vulnerability.
What are the potential impacts of CVE-2025-9389?
Exploitation of CVE-2025-9389 can result in memory corruption, which may lead to software crashes or arbitrary code execution.
Who is affected by CVE-2025-9389?
CVE-2025-9389 affects Vim version 9.1.0000 and possibly earlier versions that utilize the vulnerable function.
Is there an exploit available for CVE-2025-9389?
Yes, the exploit for CVE-2025-9389 is publicly available and could be used by attackers to compromise affected systems.