CNNVD-202508-2887 Information

Aug 24, 2025 cve

CNNVD ID

CNNVD-202508-2887

CVE-2025-9390

CNNVD Published: 2025-08-24

Description (Chinese)

Vim是Vim开源的一款跨平台的文本编辑器。 Vim 9.1.1615及之前版本存在安全漏洞，该漏洞源于src/xxd/xxd.c文件中的main函数存在缓冲区溢出。

Description (English)

Vim is a cross-platform text editor for Vim Open Source. Vim 9.1.1615 and previous versions contain a security loophole, which stems from the presence of a buffer zone spill in the Mayin function in src/xxd/xxd.c.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

VirtoSoftware

Published

2025-08-24

Last Modified

2026-02-24

References

https://vuldb.com/?submit.630903 https://vuldb.com/?id.321223 https://vuldb.com/?ctiid.321223 https://github.com/vim/vim/releases/tag/v9.1.1616 https://github.com/vim/vim/pull/17947 https://github.com/vim/vim/issues/17944 https://github.com/vim/vim/commit/eeef7c77436a78cd27047b0f5fa6925d56de3cb0 https://drive.google.com/file/d/1JLnqrdcGsjUhbYzIEweXIGZyETjHlKtX/view?usp=sharing https://nvd.nist.gov/vuln/detail/CVE-2025-9390

Patch

https://github.com/vim/vim/tags

Share on: