CVE-2026-57454: Vim: Out-of-bounds Read with Text Properties
Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.
Other sources
Vim: Out-of-bounds Read with Text Properties
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.2.0735-1 - Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.2.0679
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57454?
The severity of CVE-2026-57454 is rated as medium with a CVSS score of 6.8.
How do I fix CVE-2026-57454?
To fix CVE-2026-57454, update Vim to version 9.2.0680 or later.
What type of vulnerability is CVE-2026-57454?
CVE-2026-57454 is an out-of-bounds read vulnerability involving virtual-text properties in Vim.
What versions of Vim are affected by CVE-2026-57454?
Vim versions from 9.2.0320 to 9.2.0679 are affected by CVE-2026-57454.
What is the impact of CVE-2026-57454?
The impact of CVE-2026-57454 may lead to information disclosure due to reading past allocated buffers.