Buffer overflow in Vim

CVE-2026-55693

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is…

Vulnerability class: Buffer Overflow

Affected products

  • Vim — versions < 9.2.0653

Weakness classification (CWE)

References