Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-73074

Vim: Heap Buffer Overflow in Text Property Handling

Description

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vim vim

  • < 9.2.0841affected

References