Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28421.json",
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-122",
"CWE-20"
]
}[
{
"id": "CVE-2026-28421-3d17d28d",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3",
"target": {
"function": "ml_recover",
"file": "src/memline.c"
},
"digest": {
"length": 14021.0,
"function_hash": "18502116568675070820991537272585201917"
},
"signature_type": "Function"
},
{
"id": "CVE-2026-28421-ada861c9",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3",
"target": {
"file": "src/memline.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"199011246587927909882826721897843867559",
"259183386219722073839119059366264582880",
"6169559581476653962016699507805606794",
"319208146489323713576723428886005478664",
"280805404350571037763946438896056826850",
"272714616480082314944566735003638389781",
"236346311210978069448867884097417227983",
"63712699910113714211531833863824003057",
"102293705717870957942326056744448022832"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2026-28421-e258852f",
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3",
"target": {
"file": "src/version.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"69938409643889771528303034382765261300",
"76488580159149898110301363587882436311",
"10700031959779860258222576506501741667"
]
},
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-28421.json"