CVE-2026-73074 Vim: Heap Buffer Overflow in Text Property Handling

High 7.1 Published 11 Aug 2026 Updated 12 Aug 2026

An integer overflow in Vim's text property handling allows attackers to trigger a heap buffer overflow, potentially leading to code execution or crashes.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2026-73074?

CVE-2026-73074 is a high-severity vulnerability in Vim Vim, published on 11 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.

Weakness: CWE-190

Which versions are affected by CVE-2026-73074?

It affects 1 product.

Products include Vim Vim.

How do I fix CVE-2026-73074?

Upgrade to a fixed version.

Is CVE-2026-73074 being exploited?

There is no known exploitation of CVE-2026-73074 in the wild and no public exploit code.

All Vim Vim vulnerabilities

Sources

Also known as ALPINE-CVE-2026-73074, AZL-95553, BELL-CVE-2026-73074, DEBIAN-CVE-2026-73074, ECHO-82d9-53fe-5993, GHSA-hm4g-pjfx-m27j and 4 more.