vim: When switching to other buffers using the :all command and visual modestill being active, this may cause a heap-buffe...
CVE-2025-22134 is fixed in 21 products on 1 platform, first by vim 2:8.1.2269-1ubuntu5.30, released January 13, 2025. It is not reported as exploited. Patch Radar priority: Routine.
When switching to other buffers using the :all command and visual modestill being active, this may cause a heap-buffer overflow, because Vim doesnot properly end visual mode and therefore may try to access beyond the endof a line in a buffer. In Patch 9.1.1003 Vim will correctly reset thevisual mode before opening other windows and buffers and therefore fix thisbug. In addition it does verify that it won't try to access a position ifthe position is greater than the corresponding buffer line. Impact ismedium since the user must have switched on visual mode when executing the:all ex command. The Vim project would like to thank github user gandalf4afor reporting this issue. The issue has been fixed as of Vim patchv9.1.1003
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| vim · Debian 13.5 (trixie) | 2:9.1.1113-1 | DEBIAN-CVE-2025-22134 | Jan 13, 2025 |
| vim · Debian 14 | 2:9.1.1113-1 | DEBIAN-CVE-2025-22134 | Jan 13, 2025 |
| vim · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim · opensuse-leap 15.6 | 9.1.1101-150500.20.21.1 | SUSE-SU-2025:0723-1 | Feb 26, 2025 |
| vim · sles 15.6 | 9.1.1101-150500.20.21.1 | SUSE-SU-2025:0723-1 | Feb 26, 2025 |
| vim-athena · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-athena 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-athena · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-athena 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-athena · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-athena 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-athena · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-athena 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-common · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-common 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-common · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-common 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-common · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-common 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-common · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-common 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-common · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-data · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-debuginfo · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-debugsource · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-default-editor · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-enhanced · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-enhanced-debuginfo · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-filesystem · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-gtk · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-gtk 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-gtk · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-gtk 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-gtk3 · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-gtk3 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-gtk3 · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-gtk3 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-gtk3 · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-gtk3 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-gtk3 · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-gtk3 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-gui-common · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-gui-common 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-gui-common · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-gui-common 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-gui-common · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-gui-common 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-gui-common · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-gui-common 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-minimal · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-minimal-debuginfo · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| vim-motif · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-motif 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-motif · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-motif 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-nox · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-nox 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-nox · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-nox 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-nox · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-nox 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-nox · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-nox 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-runtime · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-runtime 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-runtime · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-runtime 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-runtime · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-runtime 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-runtime · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-runtime 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| vim-tiny · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | vim-tiny 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| vim-tiny · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | vim-tiny 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| vim-tiny · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | vim-tiny 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| vim-tiny · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | vim-tiny 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| xxd · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.30 | xxd 2:8.1.2269-1ubuntu5.30 | Jan 13, 2025 |
| xxd · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.22 | xxd 2:8.2.3995-1ubuntu2.22 | Jan 13, 2025 |
| xxd · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.6 | xxd 2:9.1.0016-1ubuntu7.6 | Jan 13, 2025 |
| xxd · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.3 | xxd 2:9.1.0496-1ubuntu6.3 | Jan 16, 2026 |
| xxd · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
| xxd-debuginfo · amzn 2023 | 2:9.2.240-1.amzn2023.0.2 | ALAS2023-2026-1584 | Apr 13, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.