Security Advisory

CVE-2026-28420

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-27 22:04:36
Last updated 2026-03-02 21:55:05
Assigner GitHub_M
CVSS score 4.4
State PUBLISHED

Description

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.