Integer overflow in Vim

CVE-2026-73074

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying…

Vulnerability class: Integer Overflow

Affected products

  • Vim — versions < 9.2.0841

Weakness classification (CWE)

References