CNNVD-202508-2889 Information

Aug 24, 2025 cve

CNNVD ID

CNNVD-202508-2889

CVE-2025-9389

CNNVD Published: 2025-08-24

Description (Chinese)

Vim是Vim开源的一款跨平台的文本编辑器。 Vim 9.1.0000版本存在缓冲区错误漏洞，该漏洞源于memmove-vec-unaligned-erms.S文件中的__memmove_avx_unaligned_erms函数操作导致内存损坏。

Description (English)

Vim is a cross-platform text editor for Vim Open Source. Version 9.10000 contains a buffer zone error loophole, resulting from memory damage caused by the operation of the memove avx unaligned erms function in a memmove-vec-unaligned-erms.S document.

Hazard Level

Critical

Vulnerability Type

缓冲区错误

Affected Vendor

VirtoSoftware

Published

2025-08-24

Last Modified

2026-02-24

References

https://vuldb.com/?submit.630898 https://vuldb.com/?id.321222 https://vuldb.com/?ctiid.321222 https://github.com/vim/vim/issues/17940#issuecomment-3203415781 https://drive.google.com/file/d/1iFbTpW79vqBPkFjWYzGYIh_E6esPhYVY/view?usp=sharing https://access.redhat.com/security/cve/cve-2025-9389 https://nvd.nist.gov/vuln/detail/CVE-2025-9389

Patch

https://github.com/vim/vim/tags

Share on: