CVE-2025-24014

CVSS 3.1 Score 4.2 of 10 (medium)

Details

Published Jan 20, 2025
Updated: Jan 21, 2025
CWE ID 787

Summary

CVE-2025-24014 is a vulnerability affecting Vim, an open-source text editor, before version 9.1.1043. In silent Ex mode, Vim typically operates without displaying a screen in batch mode. However, if binary characters are fed to Vim, it can trigger a function responsible for scrolling in a graphical version of Vim. Despite the absence of a screen, the function may cause a redraw, leading to an attempt to access the unallocated ScreenLines pointer. This vulnerability, which can result in a segmentation fault, is mitigated in Vim version 9.1.1043.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share