Out-of-Bounds Read and Write Vulnerability in Vim Command Line Text Editor
CVE-2026-73075

4.6MEDIUM

Key Information:

Vendor

Vim

Status
Vim
Vendor
CVE Published:
11 August 2026

What is CVE-2026-73075?

A vulnerability exists in the Vim command line text editor, specifically in versions 9.2.0469 to 9.2.0842. The issue arises in the popup_mark_opacity_zindex() function, where improper handling of negative values for the text-property-anchored popup allows for an out-of-bounds read and write condition. This can lead to unexpected behavior when popups are used with clipwindows having opacity. The vulnerability has been addressed in version 9.2.0843, which ensures proper indexing and handling to prevent such security risks.

Affected Version(s)

vim >= 9.2.0469, < 9.2.0843

References

https://github.com/vim/vim/security/advisories/GHSA-pmvp-...
x_refsource_CONFIRM
https://github.com/vim/vim/security/advisories/GHSA-pmvp-...
x_refsource_MISC

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.