USN-8657-1: vim Ubuntu

Vulnerability summary

USN-8657-1 is a vulnerability in vim Ubuntu with no CVSS score yet.

Timeline

1. 20-08-2026
   PublishedVulnerability first disclosed.
2. 08-10-2026
   Last modifiedVulnerability information updated.

Description

vim vulnerabilities It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73071) Yazan Balawneh discovered that Vim incorrectly handled memory when opening certain spell files. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-73072) It was discovered that Vim incorrectly handled memory when processing certain files with a large number of text properties. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73074) It was discovered that Vim incorrectly handled certain vimball files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-73076) It was discovered that Vim incorrectly handled shell arguments during keyword lookups. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73077) David Carliez discovered that Vim incorrectly handled certain directory paths when constructing netrw menus. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-73078)

No weakness data has been published for this record.