CVE-2026-73074

Medium

Description

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.

SeverityMedium

CVSS6.7

Exploit probability—

ProductVim

PublishedAug 11, 2026

First seenAug 11, 2026

Weakness typeCWE-190Integer overflow

How to fix

Update

vim vim9.2.0841 or later

Patches

github.com/vim/vim/commit/a9336b476fd1a182e3f79b5f83c0ffb04f8a922b
github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j

Affected products

Product	Affected versions	Fixed in
vim vim	v < 9.2.0841, 9.2.0320 ≤ v < 9.2.0841	9.2.0841

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.