CVE-2025-9390

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9390
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9390.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-9390
Downstream
Published
2025-08-24T14:02:09.444Z
Modified
2026-07-30T14:08:55.880679Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
vim xxd xxd.c main buffer overflow
Details

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be exploited. Upgrading to version 9.1.1616 addresses this issue. The patch is identified as eeef7c77436a78cd27047b0f5fa6925d56de3cb0. It is recommended to upgrade the affected component.

Database specific 
{
    "cwe_ids": [
        "CWE-119",
        "CWE-120"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9390.json"
}
References

Affected packages

Git / github.com/vim/vim

Affected ranges

Type
GIT
Repo
https://github.com/vim/vim
Events
Introduced
887b4981e7e929ce8676b1b524e47a7fb5a8288b
Fixed
eeef7c77436a78cd27047b0f5fa6925d56de3cb0
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.1.1615"
        },
        {
            "last_affected": "9.1.1615"
        },
        {
            "introduced": "9.1.1459"
        },
        {
            "fixed": "9.1.1616"
        }
    ]
}

Affected versions

9.*
9.1.1615
v9.*
v9.1.1615

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9390.json"
vanir_signatures 
[
    {
        "source": "https://github.com/vim/vim/commit/eeef7c77436a78cd27047b0f5fa6925d56de3cb0",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "146200493773228420153804765641940418619",
                "303976677791630286096045370925254338436",
                "121574565101660150049825050709379521444",
                "119557921091085456748924720331822243908"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-9390-545cd7d2",
        "target": {
            "file": "src/version.c"
        },
        "deprecated": false
    },
    {
        "source": "https://github.com/vim/vim/commit/eeef7c77436a78cd27047b0f5fa6925d56de3cb0",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "158087685137704314170311652646734074912",
                "89614836006123446940882212557251093597",
                "326357989856749730751812924593347172047",
                "291110553696249106278240497664780906679",
                "260802338558753997844932921427808237206",
                "334319519211017816964855896791474646317",
                "255075478571797577041046332989960932485",
                "78902608737783707864810700874854025632",
                "184490192128955350613100218089405440403",
                "237300896181439364795650945344408309731",
                "300951593696228600760190804732080773978",
                "70879017677679359255211148090922466651",
                "40175417942086987455638428709504420426",
                "97648455128164993643778868208302862644",
                "41938932438571335929600091967327023894",
                "104404853967886445003422184510568633011",
                "141713077402126074255614984636022793020"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-9390-6de4fabc",
        "target": {
            "file": "src/xxd/xxd.c"
        },
        "deprecated": false
    },
    {
        "source": "https://github.com/vim/vim/commit/eeef7c77436a78cd27047b0f5fa6925d56de3cb0",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "function_hash": "210730670501933845658456527682973390957",
            "length": 10766.0
        },
        "id": "CVE-2025-9390-c0097d10",
        "target": {
            "function": "main",
            "file": "src/xxd/xxd.c"
        },
        "deprecated": false
    }
]
vanir_signatures_modified 
"2026-07-30T14:08:55Z"