https://seclists.org/oss-sec/2026/q3/256: [vim-security] Use-after-fe in JSON Decoding in Vim >= 9.2.0511 && Vim < 9.2.0844
Published Jul 24, 2026
·Updated
Affected Software
1 affected component
vim Vim>9.2.0511<9.2.0844
Frequently Asked Questions
1
What is the severity of CVE requested for use-after-free in JSON decoding in Vim versions >= 9.2.0511 and < 9.2.0844?
The severity of this vulnerability is classified as Medium.
2
How do I fix CVE requested for use-after-free in JSON decoding in Vim versions >= 9.2.0511 and < 9.2.0844?
To fix this vulnerability, update Vim to a version greater than 9.2.0844.
3
What versions of Vim are affected by the use-after-free vulnerability in JSON decoding?
Vim versions from 9.2.0511 to below 9.2.0844 are affected by this vulnerability.
4
What type of vulnerability is CVE requested related to in Vim?
This vulnerability is categorized as a use-after-free issue, specifically in JSON decoding.
5
What are the common vulnerabilities and exposures associated with the CVE requested for Vim?
The common vulnerabilities associated with this CVE are CWE-416 for use-after-free and CWE-125 for out-of-bounds read.