CVE-2026-73070CWE-121

CVE-2026-73070

Medium · published August 11, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/channel.c and fixed-size struct pollfd arrays in src/os_unix.c, which allows a local process that can connect to the server socket to corrupt stack memory or terminate the Vim server. This issue is fixed in version 9.2.0842.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-08-11T20:17Z
Affected products (1)
ProductVersionsFixed in
vim/vim< 9.2.08429.2.0842
References (3)
https://github.com/vim/vim/commit/5598618b2daf8e36b3bf0251caaefcf0bf8e85e4 · [email protected]https://github.com/vim/vim/releases/tag/v9.2.0842 · [email protected]https://github.com/vim/vim/security/advisories/GHSA-49m8-wwxj-mr69 · [email protected]
EPSS history
Timeline
  • 11 AUG 15:21Z
    Vim: Stack Buffer Overflow in the Vim Socket Server
    cvelistv5