Vulnerability Description
Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tuple_unref() function may access already freed memory due to improper lifetime handling, leading to memory corruption. The exploit requires direct user interaction, as the script must be explicitly executed within Vim. This issue has been patched in version 9.1.1400.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vim | Vim | >= 9.1.1231, < 9.1.1400 |
Related Weaknesses (CWE)
References
- https://github.com/vim/vim/commit/1307743697bbc46e1518abfea7f89caa95bcaf97Patch
- https://github.com/vim/vim/releases/tag/v9.1.1400Patch
- https://github.com/vim/vim/security/advisories/GHSA-3r4f-mm4w-wgg6Vendor Advisory
FAQ
What is CVE-2025-55157?
CVE-2025-55157 is a vulnerability with a CVSS score of 8.8 (HIGH). Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in V...
How severe is CVE-2025-55157?
CVE-2025-55157 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-55157?
Check the references section above for vendor advisories and patch information. Affected products include: Vim Vim.