https://seclists.org/oss-sec/2026/q3/258: [vim-security] Heap Buffer Overflow when Loading a Spell File in Vim < 9.2.0846
Published Jul 24, 2026
·Updated
Affected Software
1 affected component
vim Vim<9.2.0846
Frequently Asked Questions
1
What is the severity of CVE-*requested, not yet assigned*?
The severity of CVE-*requested, not yet assigned* is classified as Medium.
2
How do I fix CVE-*requested, not yet assigned*?
To fix CVE-*requested, not yet assigned*, update Vim to version 9.2.0846 or later.
3
What type of vulnerability is CVE-*requested, not yet assigned*?
CVE-*requested, not yet assigned* is a Heap Buffer Overflow vulnerability.
4
In which versions of Vim is CVE-*requested, not yet assigned* present?
CVE-*requested, not yet assigned* is present in Vim versions prior to 9.2.0846.
5
What impact does CVE-*requested, not yet assigned* have on users?
CVE-*requested, not yet assigned* can lead to potential exploitation through out-of-bounds write vulnerabilities.