CVE-2026-28418: Vim has Heap-based Buffer Overflow in Emacs tags parsing
Vim has Heap-based Buffer Overflow in Emacs tags parsing
Other sources
Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.1.1230-2+deb13u1 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.2.0119-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.2.0078-r0 - Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.2.0074
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28418?
CVE-2026-28418 has a high severity rating due to the potential for a heap-based buffer overflow that can lead to arbitrary code execution.
How do I fix CVE-2026-28418?
To fix CVE-2026-28418, upgrade Vim to version 9.2.0074 or later.
What versions of Vim are affected by CVE-2026-28418?
Vim versions prior to 9.2.0074 are affected by CVE-2026-28418.
What type of vulnerability is CVE-2026-28418?
CVE-2026-28418 is identified as a heap-based buffer overflow vulnerability.
How can CVE-2026-28418 be exploited?
CVE-2026-28418 can be exploited by processing a malformed Emacs-style tags file, causing Vim to read out-of-bounds memory.