CVE-2025-1215

HIGH 7.8CVE-2025-1215 · Published 12/02/2025 · updated 17/06/2026

In short

CVE-2025-1215 is a HIGH (CVSS 7.8) vulnerability affecting vim (vim).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 45.8% of all vulnerabilities.
Fix: update to 9.1.1097 or later.

Package	Affected versions	Patched versions
vim vim	`< 9.1.1097`	`9.1.1097`

Description

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.

References

vim/vim commit c5654b8 · Patch
vim/vim · Exploit
vim/vim release v9.1.1097 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
security.netapp.com/advisory/ntap-20250321-0005 · Third Party Advisory

More vulnerabilities in vim

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vim

< 9.1.1097

9.1.1097

Description

More vulnerabilities in vim

See all →