What’s Vulnerable › Vulnerabilities

CVE-2025-9389: vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-24 · updated 2026-06-17
• Weakness: CWE-119

Description

A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not able to reproduce this. One of the users mentions that this appears not to be working, "when coloring is turned on".

Affected products

• vim/vim: 9.1.0000

References

• https://drive.google.com/file/d/1iFbTpW79vqBPkFjWYzGYIh_E6esPhYVY/view?usp=sharing
• https://github.com/vim/vim/issues/17940
• https://github.com/vim/vim/issues/17940#issuecomment-3203415781
• https://vuldb.com/?ctiid.321222
• https://vuldb.com/?id.321222
• https://vuldb.com/?submit.630898
• https://github.com/vim/vim/issues/17940
• https://github.com/vim/vim/issues/17940#issuecomment-3203415781
• https://vuldb.com/?submit.630898

Get alerted when CVE-2025-9389 or the next vulnerability affects your stack