vim up to 9.1.1042 Silent Ex Mode out-of-bounds write

Summaryinfo

A vulnerability classified as critical has been found in vim up to 9.1.1042. This affects an unknown function of the component Silent Ex Mode. Performing a manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2025-24014. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in vim up to 9.1.1042. It has been classified as critical. This affects some unknown processing of the component Silent Ex Mode. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2025-24014 since 01/16/2025. The exploitability is told to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 214796 (CBL Mariner 2.0 Security Update: vim (CVE-2025-24014)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 9.1.1043 eliminates this vulnerability. Applying the patch 9d1bed5eccdbb46a26b8a484f5e9163c40e63919 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (214796) and CERT Bund (WID-SEC-2025-0130). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Amazon Linux 2
• Ubuntu Linux
• SUSE Linux
• Open Source vim

Productinfo

Type

• Word Processing Software

Name

• vim

Version

• 9.1.1042

License

• open-source

Website

• Product: https://github.com/vim/vim/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion