Out-of-bounds Read in Vim

CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwindow and opacity, indexing before the sc…

Affected products

  • Vim — versions >= 9.2.0469, < 9.2.0843

Weakness classification (CWE)

References