Quick answers
- Is CVE-2026-57451 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-57451 being exploited in the wild.
- How severe is CVE-2026-57451?
- Medium severity, with a CVSS score of 5.3, published 25 June 2026.
- Which products and versions are affected?
- Vim < 9.2.0670.
- Is there a fix for CVE-2026-57451?
- A patch was published on 2026-06-17: Vim patch 9.2.0670 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-57451 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2026-57451?
- Check whether you run Vim at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An out-of-bounds read vulnerability exists in Vim's text property handling within `src/textprop.c`. The function `get_text_props()` reads a 16-bit property count from a line's buffer but fails to validate this count against the actual remaining buffer size. An attacker can provide a crafted undo file (`.un~`) that, when loaded, specifies a large property count for a line with minimal data. Subsequent operations that iterate over these properties, such as screen redraws or `prop_list()` calls, will read past the allocated buffer. This can result in a denial-of-service (crash) or the disclosure of adjacent memory contents. The attack requires the 'undofile' feature to be enabled and user interaction to trigger an undo operation on a malicious file pair. The issue is resolved in version 9.2.0670.
Affected products
- Vim Vim < 9.2.0670
Timeline
- 2026-06-17: patched: Vim patch 9.2.0670 released
- 2026-06-17: advisory: GitHub Security Advisory published
- 2026-06-25: disclosed: CVE published to NVD