CVE catalog

CVE-2025-1215

Vim vulnerabilities

Severity: Low · CVSS 2.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Published: Feb 12, 2025, 6:31:06 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.54% · Oct 25, 2026

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	vim	sid	`2:9.2.0858-1`	fixed
Debian	vim	forky	`2:9.2.0858-1`	fixed
Debian	vim	trixie	`2:9.1.1230-2`	fixed
Debian	vim	bookworm	`2:9.0.1378-2+deb12u2`	vulnerable
Ubuntu	vim	noble	Not reported	vulnerable
Ubuntu	vim	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-athena	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-common	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-doc	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-gtk3	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-gui-common	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-motif	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-nox	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-runtime	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim-tiny	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	xxd	noble	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim	pro	`2:8.0.0197-4ubuntu5`	vulnerable
Ubuntu	vim	pro	`2:8.0.1144-1ubuntu1`	vulnerable
Ubuntu	vim	pro	`2:8.0.1401-1ubuntu1`	vulnerable
Ubuntu	vim	pro	`2:8.0.1401-1ubuntu2`	vulnerable
Ubuntu	vim	pro	`2:8.0.1401-1ubuntu3`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.1`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.3`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.4`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.6`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.7`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.8`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.9`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.10`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.11`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.12`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm1`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm3`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm4`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm5`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm6`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm7`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm8`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm9`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm10`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm11`	vulnerable
Ubuntu	vim	pro	`2:8.0.1453-1ubuntu1.13+esm12`	fixed
Ubuntu	vim	20.04	`2:8.1.0875-5ubuntu2`	vulnerable
Ubuntu	vim	20.04	`2:8.1.0875-5ubuntu3`	vulnerable
Ubuntu	vim	20.04	`2:8.1.0875-5ubuntu4`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu1`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu4`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.3`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.4`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.6`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.7`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.8`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.9`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.11`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.12`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.13`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.14`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.15`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.16`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.17`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.18`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.20`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.21`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.22`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.23`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.24`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.25`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.26`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.29`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.30`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.31`	vulnerable
Ubuntu	vim	20.04	`2:8.1.2269-1ubuntu5.32`	fixed
Ubuntu	vim	22.04	`2:8.2.2434-3ubuntu3`	vulnerable
Ubuntu	vim	22.04	`2:8.2.2434-3ubuntu4`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3565-1ubuntu1`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3565-1ubuntu2`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3565-1ubuntu3`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3565-1ubuntu5`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu1`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.1`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.3`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.4`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.5`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.7`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.8`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.9`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.10`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.11`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.12`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.13`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.15`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.16`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.17`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.18`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.19`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.20`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.21`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.22`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.23`	vulnerable
Ubuntu	vim	22.04	`2:8.2.3995-1ubuntu2.24`	fixed
Ubuntu	vim	24.04	`2:9.0.1672-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2087-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2116-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2116-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2184-0ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2189-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu6`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.2`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.3`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.4`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.5`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.6`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.7`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.8`	fixed
Ubuntu	vim	24.04	`2:9.0.1672-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2087-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2116-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2116-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2184-0ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.0.2189-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0-1ubuntu1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu2`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu6`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.1`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.2`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.3`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.4`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.5`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.6`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.7`	vulnerable
Ubuntu	vim	24.04	`2:9.1.0016-1ubuntu7.8`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	vim	source	sid	`2:9.1.1113-1`	unimportant	Not reported	Not reported
Debian	vim	source	forky	`2:9.1.1113-1`	unimportant	Not reported	Not reported
Debian	vim	source	trixie	`2:9.1.1113-1`	unimportant	Not reported	Not reported
Debian	vim	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Ubuntu	vim	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-athena	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-common	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-doc	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-gtk3	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-gui-common	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-motif	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-nox	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-runtime	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim-tiny	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	xxd	deb	noble	`2:9.1.0016-1ubuntu7.8`	Not reported	Not reported	Not reported
Ubuntu	vim	deb	pro	`2:8.0.1453-1ubuntu1.13+esm12`	Not reported	USN-7419-1	Not reported
Ubuntu	vim	deb	20.04	`2:8.1.2269-1ubuntu5.32`	Not reported	USN-7419-1	Not reported
Ubuntu	vim	deb	22.04	`2:8.2.3995-1ubuntu2.24`	Not reported	USN-7419-1	Not reported
Ubuntu	vim	deb	24.04	`2:9.1.0016-1ubuntu7.8`	Not reported	USN-7419-1	Not reported
Ubuntu	vim	deb	24.04	`2:9.1.0016-1ubuntu7.8`	Not reported	UBUNTU-CVE-2025-1215	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[vim]Affected
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-athena]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-common]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-doc]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-gtk3]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-gui-common]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-motif]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-nox]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-runtime]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · all · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[vim-tiny]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
[xxd]Affected
Source package: [vim]
Details (2)
- 2:9.0.1378-2+deb12u2 · amd64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12
- 2:9.0.1378-2+deb12u2 · arm64 · bookworm
  Affected
  usn · vim · debian · bookworm; usn · vim · debian · 12

[Debian 13 (Trixie)]

[vim]Fixed
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-athena]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-common]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-doc]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-gtk3]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-gui-common]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-motif]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-nox]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · amd64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · arm64 · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
[vim-runtime]Fixed
Source package: [vim]
Details (2)
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13
- 2:9.1.1230-2 · all · trixie
  Fixed · Fixed: 2:9.1.1113-1
  usn · vim · debian · 13

Next results

Observed: Oct 26, 2026, 11:19:32 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]