logo_clicknbuy.png

CVE-2025-1215 – Vim Local Log Memory Corruption Vulnerability

The following table lists the changes that have been made to the
CVE-2025-1215 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • CVE Modified
    by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Feb. 12, 2025

    Action Type Old Value New Value
    Added Reference https://github.com/vim/vim/issues/16606
    Added Reference https://vuldb.com/?submit.497546
  • New CVE Received
    by [email protected]

    Feb. 12, 2025

    Action Type Old Value New Value
    Added Description A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument –log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.
    Added CVSS V4.0 AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CVSS V3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
    Added CVSS V2 (AV:L/AC:L/Au:S/C:N/I:N/A:P)
    Added CWE CWE-119
    Added Reference https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9
    Added Reference https://github.com/vim/vim/issues/16606
    Added Reference https://github.com/vim/vim/releases/tag/v9.1.1097
    Added Reference https://vuldb.com/?ctiid.295174
    Added Reference https://vuldb.com/?id.295174
    Added Reference https://vuldb.com/?submit.497546
Share the Post:

Related Posts