Vulnerability Description
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vim | Vim | < 9.1.1097 |
| Netapp | Bootstrap Os | - |
Related Weaknesses (CWE)
References
- https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9Patch
- https://github.com/vim/vim/issues/16606ExploitIssue Tracking
- https://github.com/vim/vim/releases/tag/v9.1.1097Release Notes
- https://vuldb.com/?ctiid.295174Permissions RequiredVDB Entry
- https://vuldb.com/?id.295174Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.497546Third Party AdvisoryVDB Entry
- https://security.netapp.com/advisory/ntap-20250321-0005/Third Party Advisory
- https://github.com/vim/vim/issues/16606ExploitIssue Tracking
- https://vuldb.com/?submit.497546Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-1215?
CVE-2025-1215 is a vulnerability with a CVSS score of 2.8 (LOW). A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corrup...
How severe is CVE-2025-1215?
CVE-2025-1215 has been rated LOW with a CVSS base score of 2.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1215?
Check the references section above for vendor advisories and patch information. Affected products include: Vim Vim, Netapp Bootstrap Os.