Use After Free in Vim
CVE-2026-73071
Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill and free the current buffer, causing the…
Vulnerability class: Use-After-Free
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Vim — versions >= 9.2.0511, < 9.2.0844
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-73071?
- CVE-2026-73071 is a low-severity vulnerability in Vim, classified under Use After Free. CVSS score: 3.3/10. Published 2026-08-11.
- How severe is CVE-2026-73071?
- Low severity. CVSS v3 base score is 3.3 out of 10.