CVE search · CVE-2025-1215
CVE-2025-1215
low 2.4
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cna@vuldb.com
- Weakness
- CWE-119
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | low 2.4 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
cna@vuldb.comSecondary |
| CVSS 3.1 | low 2.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L |
cna@vuldb.comSecondary |
| CVSS 3.1 | high 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | low 1.7 | AV:L/AC:L/Au:S/C:N/I:N/A:P |
cna@vuldb.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9Patch
- https://github.com/vim/vim/issues/16606ExploitIssue Tracking
- https://github.com/vim/vim/releases/tag/v9.1.1097Release Notes
- https://vuldb.com/?ctiid.295174Permissions RequiredVDB Entry
- https://vuldb.com/?id.295174Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.497546Third Party AdvisoryVDB Entry
- https://security.netapp.com/advisory/ntap-20250321-0005/Third Party Advisory
- https://github.com/vim/vim/issues/16606ExploitIssue Tracking
- https://vuldb.com/?submit.497546Third Party AdvisoryVDB Entry