Logo
vulnerabilityCVE-2026-28422
Name
CVE-2026-28422
Source
NVD ( link)Debian ( link)
Description
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
vim
Exploitable

Vulnerability Ratings#


2.2
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.1.2148
Exploitable
buildroot
master
9.1.2148
Exploitable
openwrt
master
9.2.0-r1
Exploitable
yocto
kirkstone
9.1.1683
Exploitable
yocto
master
9.2.0569
Not Affected
yocto
scarthgap
9.1.1683
Exploitable