Executive Summary

Heap-based buffer overflow in Vim prior to 9.0.1873 allows attackers to execute arbitrary code via crafted input, potentially leading to remote code execution. No current CISA KEV listing.

---

Authoritative CVE Metadata - CVSS Base Score: 7.8 (HIGH) - Published: 2023-09-05T19:15:49.207 - Last Modified: 2026-09-17T17:59:09.700

Original Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

"He that is giddy thinks the world turns round."

— William Shakespeare