https://seclists.org/oss-sec/2026/q3/595: [vim-security] Out-of-bounds Access in libvterm size Handling in Vim < 9.2.1013
Published Aug 26, 2026
·Updated
Affected Software
1 affected component
vim Vim>9.2.1013
Frequently Asked Questions
1
Which Vim installations are affected?
Vim versions earlier than 9.2.1013 are affected because they include the vulnerable bundled libvterm resize handling.
2
What does an attacker need to do to trigger the issue?
A program running in a Vim terminal window must send a CSI 8 ; rows ; cols t resize request with values beyond the screen allocation limits, then emit ordinary text output that moves the cursor beyond the allocated line information.