CVE-2025-1215 LOW

CVE-2025-1215: vim main.c memory corruption

Vendor N/A

Product vim

Weakness CWE-119

Published February 12, 2025

Last update March 21, 2025

View on NVD All CVEs

CVSS base score

2.4/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.

Key dates

02Disclosure timeline

February 12, 2025 CVE published

March 21, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1215 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/119.html