CVE-2025-22134Heap-based Buffer Overflow in VIM

Severity
5.5MEDIUMNVD
EPSS
0.1%
top 72.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateJan 21

Description

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won't try to access a position if the position is greater than the corresponding buffer lin

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

CVEListV5vim/vim< v9.1.1003
debiandebian/vim< vim 2:9.1.1113-1 (forky)
Debianvim/vim< 2:9.1.1113-1+1
NVDvim/vim9.1.1003

Patches

🔴Vulnerability Details

1
OSV
CVE-2025-22134: When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not2025-01-13

📋Vendor Advisories

3
Ubuntu
Vim vulnerability2025-01-21
Red Hat
vim: heap-buffer-overflow with visual mode in Vim < 9.1.10032025-01-13
Debian
CVE-2025-22134: vim - When switching to other buffers using the :all command and visual mode still bei...2025
CVE-2025-22134 — Heap-based Buffer Overflow in VIM | cvebase