ALAS2023-2025-932

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component. (CVE-2025-1215)

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043. (CVE-2025-24014)

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables and files. It also allows to show the contents of registers using the `:registers` or `:display` ex command. When redirecting the output of `:display` to a register, Vim will free the register content before storing the new content in the register. Now when redirecting the `:display` command to a register that is being displayed, Vim will free the content while shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the ex_display() function, that it does not try to redirect to a register while displaying this register at the same time. However this check is not complete, and so Vim does not check the `+` and `*` registers (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero when trying to redirect to the clipboard registers `*` or `+`. Users are advised to upgrade. There are no known workarounds for this vulnerability. (CVE-2025-26603)

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198. (CVE-2025-29768)

aarch64:
    vim-enhanced-debuginfo-9.1.1202-1.amzn2023.0.1.aarch64
    vim-minimal-debuginfo-9.1.1202-1.amzn2023.0.1.aarch64
    vim-enhanced-9.1.1202-1.amzn2023.0.1.aarch64
    xxd-debuginfo-9.1.1202-1.amzn2023.0.1.aarch64
    xxd-9.1.1202-1.amzn2023.0.1.aarch64
    vim-debuginfo-9.1.1202-1.amzn2023.0.1.aarch64
    vim-debugsource-9.1.1202-1.amzn2023.0.1.aarch64
    vim-minimal-9.1.1202-1.amzn2023.0.1.aarch64
    vim-common-9.1.1202-1.amzn2023.0.1.aarch64

noarch:
    vim-data-9.1.1202-1.amzn2023.0.1.noarch
    vim-filesystem-9.1.1202-1.amzn2023.0.1.noarch
    vim-default-editor-9.1.1202-1.amzn2023.0.1.noarch

src:
    vim-9.1.1202-1.amzn2023.0.1.src

x86_64:
    vim-enhanced-debuginfo-9.1.1202-1.amzn2023.0.1.x86_64
    xxd-9.1.1202-1.amzn2023.0.1.x86_64
    vim-debuginfo-9.1.1202-1.amzn2023.0.1.x86_64
    xxd-debuginfo-9.1.1202-1.amzn2023.0.1.x86_64
    vim-enhanced-9.1.1202-1.amzn2023.0.1.x86_64
    vim-minimal-debuginfo-9.1.1202-1.amzn2023.0.1.x86_64
    vim-minimal-9.1.1202-1.amzn2023.0.1.x86_64
    vim-debugsource-9.1.1202-1.amzn2023.0.1.x86_64
    vim-common-9.1.1202-1.amzn2023.0.1.x86_64