What’s Vulnerable › Vulnerabilities

CVE-2018-20786

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-24 · updated 2026-10-15
• Weakness: CWE-476

Description

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

Affected products

• Leonerd Libvterm: through 0\+bzr726

References

• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
• https://github.com/vim/vim/issues/3711
• https://usn.ubuntu.com/4309-1/
• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
• https://github.com/vim/vim/issues/3711
• https://usn.ubuntu.com/4309-1/

Get alerted when CVE-2018-20786 or the next vulnerability affects your stack