CVE-2025-26603

vim: Vim is a greatly improved version of the good old UNIX editor Vi

CVE-2025-26603 is fixed in 22 products on 1 platform, first by vim 2:8.0.1453-1ubuntu1.13+esm12, released February 18, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
4.2
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0024
15th percentile

Vim is a greatly improved version of the good old UNIX editor Vi. Vimallows to redirect screen messages using the `:redir` ex command toregister, variables and files. It also allows to show the contents ofregisters using the `:registers` or `:display` ex command. When redirectingthe output of `:display` to a register, Vim will free the register contentbefore storing the new content in the register. Now when redirecting the`:display` command to a register that is being displayed, Vim will free thecontent while shortly afterwards trying to access it, which leads to ause-after-free. Vim pre 9.1.1115 checks in the ex_display() function, thatit does not try to redirect to a register while displaying this register atthe same time. However this check is not complete, and so Vim does notcheck the `+` and `*` registers (which typically donate the X11/clipboardregisters, and when a clipboard connection is not possible will fall backto use register 0 instead. In Patch 9.1.1115 Vim will therefore skipoutputting to register zero when trying to redirect to the clipboardregisters `*` or `+`. Users are advised to upgrade. There are no knownworkarounds for this vulnerability.

Where it's fixed

ProductFixed inFixReleased
Linux
vim · Debian 13.5 (trixie) 2:9.1.1230-1 DEBIAN-CVE-2025-26603 Feb 18, 2025
vim · Debian 14 2:9.1.1230-1 DEBIAN-CVE-2025-26603 Feb 18, 2025
vim · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-athena · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-athena 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-athena · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-athena 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-athena · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-athena 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-athena · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-athena 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-athena · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-athena 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-common · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-common 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-common · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-common 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-common · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-common 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-common · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-common 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-common · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-common 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-common · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-data · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-debuginfo · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-debugsource · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-default-editor · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-enhanced · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-enhanced-debuginfo · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-filesystem · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-gnome · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-gnome 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-gtk · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-gtk 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-gtk · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-gtk 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-gtk · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-gtk 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-gtk3 · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-gtk3 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-gtk3 · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-gtk3 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-gtk3 · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-gtk3 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-gtk3 · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-gtk3 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-gtk3 · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-gtk3 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-gui-common · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-gui-common 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-gui-common · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-gui-common 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-gui-common · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-gui-common 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-gui-common · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-gui-common 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-gui-common · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-gui-common 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-minimal · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-minimal-debuginfo · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
vim-motif · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-motif 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-motif · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-motif 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-nox · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-nox 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-nox · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-nox 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-nox · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-nox 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-nox · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-nox 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-nox · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-nox 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-runtime · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-runtime 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-runtime · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-runtime 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-runtime · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-runtime 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-runtime · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-runtime 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-runtime · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-runtime 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
vim-tiny · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 vim-tiny 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
vim-tiny · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 vim-tiny 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
vim-tiny · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 vim-tiny 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
vim-tiny · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 vim-tiny 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
vim-tiny · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 vim-tiny 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
xxd · Ubuntu 18.04.6 LTS (bionic) 2:8.0.1453-1ubuntu1.13+esm12 xxd 2:8.0.1453-1ubuntu1.13+esm12 Feb 18, 2025
xxd · Ubuntu 20.04 LTS (focal) 2:8.1.2269-1ubuntu5.32 xxd 2:8.1.2269-1ubuntu5.32 Feb 18, 2025
xxd · Ubuntu 22.04.1 LTS (jammy) 2:8.2.3995-1ubuntu2.24 xxd 2:8.2.3995-1ubuntu2.24 Feb 18, 2025
xxd · Ubuntu 24.04.5 LTS (noble) 2:9.1.0016-1ubuntu7.8 xxd 2:9.1.0016-1ubuntu7.8 Feb 18, 2025
xxd · Ubuntu 24.10 (oracular) 2:9.1.0496-1ubuntu6.5 xxd 2:9.1.0496-1ubuntu6.5 Jan 16, 2026
xxd · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025
xxd-debuginfo · amzn 2023 2:9.1.1202-1.amzn2023.0.1 ALAS2023-2025-932 Apr 9, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.