Buffer overflow in Vim

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/cha…

Vulnerability class: Buffer Overflow

Affected products

Vim — versions < 9.2.0842

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)