Out-of-Bounds Read Vulnerability in Vim Text Editor

CVE-2026-57454

What is CVE-2026-57454?

Vim, a widely-used open-source command line text editor, suffers from an out-of-bounds read vulnerability that affects versions between 9.2.0320 and 9.2.0679. When processing crafted undo or swap files, the editor may attempt to read a virtual text property using an improper offset, which can lead to accessing memory outside the intended scope. This flaw may crash the editor or expose adjacent heap memory contents, potentially compromising system stability and data security. Users are advised to update to version 9.2.0679 or later to mitigate this risk.

References