CVE-2025-55157

HIGH

8.8

Description

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tuple_unref() function may access already freed memory due to improper lifetime handling, leading to memory corruption. The exploit requires direct user interaction, as the script must be explicitly executed within Vim. This issue has been patched in version 9.1.1400.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published8/11/2025

Last Modified8/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

vim:vim

Weaknesses (CWE)

CWE-416

References

https://github.com/vim/vim/commit/1307743697bbc46e1518abfea7f89caa95bcaf97(security-advisories@github.com)

https://github.com/vim/vim/releases/tag/v9.1.1400(security-advisories@github.com)

https://github.com/vim/vim/security/advisories/GHSA-3r4f-mm4w-wgg6(security-advisories@github.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.