CyberRota Analysis
AI-GeneratedVim versions prior to 9.2.0846 are vulnerable to a heap overflow due to improper handling of spell files, which can lead to under-counted mapping lists and allow attackers to influence memory writes. This vulnerability poses a high risk as it can be exploited to execute arbitrary code or crash the application. Organizations using affected versions of Vim, especially those in environments where untrusted spell files may be processed, should prioritize upgrading to the patched version to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.