CyberRota Analysis
AI-GeneratedVim, an open-source command line text editor, contains a vulnerability in the prop_add_one() function that allows for a uint16_t property count overflow, potentially leading to heap corruption. This flaw can result in arbitrary code execution or denial of service, making it critical for users running versions prior to 9.2.0841 to upgrade immediately. Organizations relying on Vim for development or scripting tasks should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.