CVE-2026-73075: Vim: Out-of-bounds Access in Popup Opacity Handling
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex() in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an out-of-bounds read and conditional write. This issue is fixed in version 9.2.0843.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
vimto a version that resolves this vulnerability.Fixed in 9.2.0843
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73075?
CVE-2026-73075 has a risk score of 37, indicating a moderate vulnerability in Vim.
How do I fix CVE-2026-73075?
To fix CVE-2026-73075, update Vim to version 9.2.0844 or later.
What systems are affected by CVE-2026-73075?
CVE-2026-73075 affects Vim versions from 9.2.0469 to 9.2.0843.
What kind of vulnerability is CVE-2026-73075?
CVE-2026-73075 is an out-of-bounds access vulnerability affecting popup opacity handling in Vim.
Can CVE-2026-73075 lead to security issues?
Yes, CVE-2026-73075 can potentially lead to data corruption or denial of service due to out-of-bounds access.