Logo
vulnerabilityCVE-2026-28421
Name
CVE-2026-28421
Source
NVD ( link)Debian ( link)
Description
Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
vim
Exploitable

Vulnerability Ratings#


5.3
CVSSv31
7.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.1.2148
Exploitable
buildroot
master
9.1.2148
Exploitable
openwrt
master
9.2.0-r1
Exploitable
yocto
kirkstone
9.1.1683
Exploitable
yocto
master
9.2.0569
Not Affected
yocto
scarthgap
9.1.1683
Exploitable