oss-sec mailing list archives From : Christian Brabandt <cb () 256bit org> Date : Sun, 21 Jun 2026 22:08:31 +0200 Out-of-bounds Write in SOFO Soundfolding in Vim < 9.2.0698 ========================================================== Date: 21.06.2026 Severity: Medium CVE: *requested, not yet assigned* CWE: Out-of-bounds Write (CWE-787) ## Summary The single-byte branch of `spell_soundfold_sofo()` in `src/spell.c` translates a word through a spell file's SOFO (sound-folding) byte map into