CVE catalog
CVE-2023-48232
vim: CVE-2023-48232
- Severity
- Medium · CVSS 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.67% · Oct 25, 2026
Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues on the next physical line directly in the window border because the 'cpo' setting includes the 'n' flag. Only users with non-default settings are affected and the exception should only result in a crash. This issue has been addressed in commit `cb0b99f0` which has been included in release version 9.0.2107. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | vim | sid | 2:9.2.0858-1 | fixed |
| Debian | vim | forky | 2:9.2.0858-1 | fixed |
| Debian | vim | trixie | 2:9.1.1230-2 | fixed |
| Debian | vim | bookworm | 2:9.0.1378-2+deb12u2 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | vim | source | sid | 2:9.0.2116-1 | unimportant | Not reported | Not reported |
| Debian | vim | source | forky | 2:9.0.2116-1 | unimportant | Not reported | Not reported |
| Debian | vim | source | trixie | 2:9.0.2116-1 | unimportant | Not reported | Not reported |
| Debian | vim | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0783-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-48232]
- [https://security-tracker.debian.org/tracker/CVE-2023-48232]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48232.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2962.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]