neovim Schwachstellen (CVE)

Für neovim veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse
5.3Mittel
CVE-2026-11487

Neovim View Branch secure.lua M.read command injection

Neovim

A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a manipulation of the argument path can lead to command injection. It is possible to lau…

1.0%EPSS
6.6Mittel
CVE-2026-45130

Vim: Heap Buffer Overflow in spell file loading

vim vim

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active. An attacker-controlled length field in the spe…

6.6Mittel
CVE-2026-25749

Heap Overflow in Vim

vim vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in sr…

4.2Mittel
CVE-2025-22134

heap-buffer-overflow with visual mode in Vim < 9.1.1003

vim vim

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.…