Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-28419

Vim has Heap-based Buffer Underflow in Emacs tags parsing

Description

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vim vim

  • < 9.2.0075affected

References