LOWVulnerability
CVE-2026-73072
Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.
Properties
- epss_score
- 0.00125
- cve_id
- CVE-2026-73072
- published_at
- 2026-08-11T16:17:38.553
- last_modified
- 2026-09-09T20:44:04.357
- epss_percentile
- 0.02551
Related Entities (4)
ENRICHED_BY (1)
→[Source]FIRST EPSS
HAS_WEAKNESS (2)
→[Weakness]Out-of-bounds Write
→[Weakness]Heap-based Buffer Overflow
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph