https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:27:26 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-05072 bdu:2026-05072 https://vulnerability.circl.lu/vuln/bdu:2026-05072 https://vulnerability.circl.lu/vuln/cve-2026-25749 <p><strong>Affected:</strong> vim</p> <p>Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim&#39;s tag file resolution logic when processing the &#39;helpfile&#39; option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled &#39;helpfile&#39; option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.</p> <p><strong>Affected:</strong> vim</p> <p>Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim&#39;s tag file resolution logic when processing the &#39;helpfile&#39; option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled &#39;helpfile&#39; option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.</p> https://vulnerability.circl.lu/vuln/cve-2026-25749