See how neovim compares to other vendors in security performance
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assertfails or nviminput in Neovim.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
Last updated 24 July 2024
Last updated 24 July 2024
Last updated 24 July 2024
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
Last updated 24 July 2024
Last updated 24 July 2024
AMD. A buffer overflow issue was addressed with improved memory handling.
AMD. A buffer overflow issue was addressed with improved memory handling.
AMD. A buffer overflow issue was addressed with improved memory handling.
Last updated 21 August 2024
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
Last updated 24 July 2024
Last updated 24 July 2024
Last updated 24 July 2024
Last updated 24 July 2024
Last updated 24 July 2024
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
Last updated 21 May 2026
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
heap-buffer-overflow with visual mode in Vim < 9.1.1003
Accounts. A privacy issue was addressed with improved private data redaction for log entries.
Last updated 5 September 2024
Last updated 24 July 2024
Vim < v9.1.0648 has a double-free in dialogchanged()