VULNERABILITY INTELLIGENCE

CVE-2026-73074

CVSS score6.7 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-06
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.

Weakness classification

  • security-advisories@github.com: CWE-190

Primary references