CVE-2025-24014

Description

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.

How to fix CVE-2025-24014

To remediate CVE-2025-24014, upgrade the affected package to a fixed version below.

• —upgrade to 9.1.1105-r0 or later
• —no fix listed

Is CVE-2025-24014 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 9.1.1105-r0
• from 0

CVSS scores

References (2)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2025-24014
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2025-24014