CVE-2026-73074: Vim: Heap Buffer Overflow in Text Property Handling
Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone() in src/textprop.c uses the proplen value from gettextprops() to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.2.0841
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73074?
CVE-2026-73074 has a risk rating of 44, indicating a significant vulnerability.
How do I fix CVE-2026-73074?
To fix CVE-2026-73074, update Vim to version 9.2.0841 or later.
What kind of vulnerability is CVE-2026-73074?
CVE-2026-73074 is classified as a heap buffer overflow vulnerability.
Which versions of Vim are affected by CVE-2026-73074?
Vim versions prior to 9.2.0841 are affected by CVE-2026-73074.
What could be the impact of exploiting CVE-2026-73074?
Exploiting CVE-2026-73074 could lead to memory corruption and potentially allow arbitrary code execution.