Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.

A flaw was found in Vim, an open source command-line text editor. A local attacker could exploit this vulnerability by providing a specially crafted undo or swap file. When Vim processes this file, an out-of-bounds read occurs, which can lead to the disclosure of sensitive information from memory or cause the application to crash, resulting in a denial of service (DoS).

This vulnerability was introduced in Vim version 9.2.0320. Because Red Hat products do not ship this version, they are unaffected. Red Hat Enterprise Linux 10 Not affected vim Red Hat Enterprise Linux 6 Not affected vim Red Hat Enterprise Linux 7 Not affected vim Red Hat Enterprise Linux 8 Not affected vim Red Hat Enterprise Linux 9 Not affected vim Red Hat OpenShift Container Platform 4 Not affected rhcos https://www.cve.org/CVERecord?id=CVE-2026-57454 https://nvd.nist.gov/vuln/detail/CVE-2026-57454 https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949 https://github.com/vim/vim/releases/tag/v9.2.0679 https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w