Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 9: 2025-0074 Critical: Vim Heap Use-After-Free (CVE-2025-26603)

mageia
Calendar Grey February 25, 2025
Dist Mageia Esm H88
Memory corruption vulnerability in Vim prior to version 9.1.1115 has been addressed in a Mageia security advisory. For more information, please click here.
A heap use-after-free was found in str_to_reg() in Vim < 9.1.1115

Summary

A heap use-after-free was found in str_to_reg() in Vim < 9.1.1115. (CVE-2025-26603)

References

- https://bugs.mageia.org/show_bug.cgi?id=34035

- https://openwall.com/lists/oss-security/2025/02/16/1

- https://github.com/vim/vim/security/advisories/GHSA-63p5-mwg2-787v

- https://www.cve.org/CVERecord?id=CVE-2025-26603

Topics%20covered

Topics Covered

security advisory critical software update threat vulnerability vim heap issue Mageia Vim

Resolution

SRPMS

- 9/core/vim-9.1.1122-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Feb 2025
URL: https://advisories.mageia.org/MGASA-2025-0074.html
Type: security
CVE: CVE-2025-26603

Topics%20covered

Topics Covered

security advisory critical software update threat vulnerability vim heap issue Mageia Vim

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here