CVE catalog
CVE-2025-55157
vim: CVE-2025-55157
- Severity
- Medium · CVSS 6.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 25, 2026
Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tuple_unref() function may access already freed memory due to improper lifetime handling, leading to memory corruption. The exploit requires direct user interaction, as the script must be explicitly executed within Vim. This issue has been patched in version 9.1.1400.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | vim | sid | 2:9.2.0858-1 | not affected |
| Debian | vim | forky | 2:9.2.0858-1 | not affected |
| Debian | vim | trixie | 2:9.1.1230-2 | not affected |
| Debian | vim | bookworm | 2:9.0.1378-2+deb12u2 | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | vim | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | vim | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | vim | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | vim | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [vim]Not affected
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-athena]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-common]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-doc]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-gtk3]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-gui-common]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-motif]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-nox]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-runtime]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· all · bookwormNot affected
dsa · vim · debian · bookworm
- [vim-tiny]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
- [xxd]Not affected
Source package: [vim]
Details (2)
2:9.0.1378-2+deb12u2· amd64 · bookwormNot affected
dsa · vim · debian · bookworm
2:9.0.1378-2+deb12u2· arm64 · bookwormNot affected
dsa · vim · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03240-1.json]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-55157]
- [https://security-tracker.debian.org/tracker/CVE-2025-55157]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55157.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0349.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]