Out-of-bounds read in Vim - CVE-2026-57452

Vulnerability identifier: #VU134969

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-57452

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds read in crypt_sodium_buffer_decode() when parsing a crafted libsodium-encrypted file. A remote attacker can trick the victim into opening a crafted file and entering a key to cause a denial of service.

Only instances built with the +sodium feature are vulnerable, and the issue affects files using the VimCrypt~04! or VimCrypt~05! encryption method.

Vim
Debian Linux
openEuler
Ubuntu
vim-athena (Ubuntu package)
vim-tiny (Ubuntu package)
vim-gtk3 (Ubuntu package)
vim-nox (Ubuntu package)
vim-runtime (Ubuntu package)
xxd (Ubuntu package)
vim-gtk (Ubuntu package)
vim (Ubuntu package)
vim-gui-common (Ubuntu package)
vim-common (Ubuntu package)
vim-motif (Ubuntu package)
vim
vim-X11
vim-common
vim-debuginfo
vim-debugsource
vim-enhanced
vim-minimal
vim-filesystem
vim (Debian package)

Install security update from vendor's website.

Vim - update to 9.2.0671
vim-athena (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8
vim-tiny (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-gtk3 (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-nox (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-runtime (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
xxd (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-gtk (Ubuntu package) - update to 2:8.2.3995-1ubuntu2.33
vim (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-gui-common (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-common (Ubuntu package) - addressed in versions 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim-motif (Ubuntu package) - addressed in versions 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6
vim - update to 9.0.2092-38
vim-X11 - update to 9.0.2092-38
vim-common - update to 9.0.2092-38
vim-debuginfo - update to 9.0.2092-38
vim-debugsource - update to 9.0.2092-38
vim-enhanced - update to 9.0.2092-38
vim-minimal - update to 9.0.2092-38
vim-filesystem - update to 9.0.2092-38
vim (Debian package) - update to 2:9.1.1230-2+deb13u1

• https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486
• https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f

• Out-of-bounds read in Vim
• Ubuntu update for vim
• openEuler update for vim
• Debian update for vim