Vim: Out-of-bounds Read in Terminal Screen Snapshot

Description

A vulnerability categorized as problematic has been discovered in vim up to 9.2.564. This issue affects the function update_snapshot of the file src/terminal.c of the component Command Line Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2026-52859. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

Affected Products

References

• https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm(x_refsource_CONFIRM)
• https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19(x_refsource_MISC)
• https://github.com/vim/vim/releases/tag/v9.2.0565(x_refsource_MISC)

Related News (2 articles)