Skip to content
CVE PROGRAM SOURCE RECORD2.2 Low

CVE-2026-28422

Vim has stack-buffer-overflow in build_stl_str_hl()

Description

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vim vim

  • < 9.2.0078affected

References