{"id":"AZL-91116","summary":"CVE-2026-57451 affecting package vim for versions less than 9.2.0735-1","details":"Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline after a line's text and returns it as the number of 32-byte textprop_T entries that follow. The only check is a floor that guarantees room for a single entry; the count is never checked against the amount of data actually present. A line that declares a large count while carrying little data causes consumers to read far past the end of the line buffer. Such a line can be delivered through a crafted undo file, leading to a crash. This vulnerability is fixed in 9.2.0670.","modified":"2026-08-28T17:48:12.045667792Z","published":"2026-06-25T16:16:42Z","upstream":["CVE-2026-57451"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57451"}],"affected":[{"package":{"name":"vim","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/vim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0735-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91116.json"}}],"schema_version":"1.9.0"}