Logo
›
›vulnerability›CVE-2026-73074
Name
CVE-2026-73074
Source
NVD ( link)Debian ( link)
Description
Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
vim
Exploitable

Vulnerability Ratings#


7.1
CVSSv4
6.7
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.2.0943
Not Affected
buildroot
master
9.2.0943
Not Affected
openwrt
master
9.2.1014-r1
Not Affected
openwrt
openwrt-25.12
9.2.1014-r1
Not Affected
yocto
master
9.2.0993
Not Affected
yocto
master
9.2.0993
Not Affected
yocto
scarthgap
9.1.1683
Exploitable