CVE-2025-29768
Vim vulnerable to potential data loss with zip.vim and special crafted zip files
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Vim vulnerable to potential data loss with zip.vim and special crafted zip files
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-88
- Updated
- 2026-11-02
EUVDEUVD-2025-6366
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
EUVD-2025-6366- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
NVD
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-88
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
ALPINE-CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-03
OSVBELL-CVE-2025-29768
- Record
BELL-CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSV
Vim vulnerable to potential data loss with zip.vim and special crafted zip files
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-88
- Updated
- 2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
DEBIAN-CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2025-1351
vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.
Security Fix(es):
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.(CVE-2025-29768)
- Record
OESA-2025-1351- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-29768
CVE-2025-29768 in vim - Patched by Root
Root has patched CVE-2025-29768 in the vim package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-29768- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVAZL-58616 No score
CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
AZL-58616- Updated
- 2026-11-02
OSVAZL-58632 No score
CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
- Record
AZL-58632- Updated
- 2026-11-02
OSVCLSA-2025-1765208529 No score
vim: Fix of 2 CVEs
- CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files
- CVE-2025-29768: use glob '[-]' to protect filenames starting with '-'
- Record
CLSA-2025-1765208529- Updated
- 2026-11-02
OSVMGASA-2025-0107 No score
Updated vim packages fix security vulnerability
Vim vulnerable to potential data loss with zip.vim and special crafted zip files. (CVE-2025-29768)
- Record
MGASA-2025-0107- Updated
- 2026-11-02
OSVSUSE-SU-2025:02226-1 No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).
- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).
- Record
SUSE-SU-2025:02226-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02227-1 No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).
- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).
- Record
SUSE-SU-2025:02227-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02228-1 No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).
- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).
- Record
SUSE-SU-2025:02228-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimAlpine:v3.22 |
before 9.1.1202-r0 | 9.1.1202-r0 |
vimAlpine:v3.23 |
before 9.1.1202-r0 | 9.1.1202-r0 |
vimAlpine:v3.24 |
before 9.1.1202-r0 | 9.1.1202-r0 |
vimAzure Linux:3 |
before 9.1.1198-1 | 9.1.1198-1 |
vimAzure Linux:2 |
before 9.1.1198-1 | 9.1.1198-1 |
vimAlpaquita:23 |
9.0.0820-r2 up to 9.1.1202-r0 | 9.1.1202-r0 |
vimAlpaquita:stream |
9.0.1395-r0 up to 9.1.1202-r0 | 9.1.1202-r0 |
vim-X11TuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2:8.2.2637-20.el9_1.tuxcare.els11 | 2:8.2.2637-20.el9_1.tuxcare.els11 |
vim-commonTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2:8.2.2637-20.el9_1.tuxcare.els11 | 2:8.2.2637-20.el9_1.tuxcare.els11 |
vim-enhancedTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2:8.2.2637-20.el9_1.tuxcare.els11 | 2:8.2.2637-20.el9_1.tuxcare.els11 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vim-filesystemTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2:8.2.2637-20.el9_1.tuxcare.els11 | 2:8.2.2637-20.el9_1.tuxcare.els11 |
vim-minimalTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2:8.2.2637-20.el9_1.tuxcare.els11 | 2:8.2.2637-20.el9_1.tuxcare.els11 |
vimDebian:12 |
All versions, plus listed versions 2:9.0.1378-22:9.0.1378-2+deb12u12:9.0.1378-2+deb12u22:9.0.1658-12:9.0.1672-1 Show 40 moreShow less2:9.0.1894-12:9.0.2018-12:9.0.2087-12:9.0.2103-12:9.0.2116-12:9.0.2189-12:9.1.0-12:9.1.0016-12:9.1.0199-12:9.1.0374-12:9.1.0377-12:9.1.0496-12:9.1.0698-12:9.1.0709-12:9.1.0709-22:9.1.0777-12:9.1.0861-12:9.1.0967-12:9.1.0967-22:9.1.1113-12:9.1.1230-12:9.1.1230-22:9.1.1385-12:9.1.1766-12:9.1.1829-12:9.1.1846-12:9.1.1882-12:9.1.2103-12:9.1.2141-12:9.2.0119-12:9.2.0136-12:9.2.0218-12:9.2.0315-12:9.2.0338-12:9.2.0355-12:9.2.0428-12:9.2.0461-12:9.2.0524-12:9.2.0782-12:9.2.0858-1 |
None known |
vimDebian:13 |
before 2:9.1.1230-1 | 2:9.1.1230-1 |
vimDebian:14 |
before 2:9.1.1230-1 | 2:9.1.1230-1 |
vimMageia:9 |
before 9.1.1202-1.mga9 | 9.1.1202-1.mga9 |
vimopenEuler:22.03-LTS-SP3 |
before 9.0-33.oe2203sp3 | 9.0-33.oe2203sp3 |
vimopenEuler:22.03-LTS-SP4 |
before 9.0-33.oe2203sp4 | 9.0-33.oe2203sp4 |
vimopenEuler:24.03-LTS |
before 9.0.2092-18.oe2403sp1 | 9.0.2092-18.oe2403sp1 |
vimopenEuler:24.03-LTS-SP1 |
before 9.0.2092-18.oe2403sp1 | 9.0.2092-18.oe2403sp1 |
vimopenEuler:20.03-LTS-SP4 |
before 9.0-33.oe2003sp4 | 9.0-33.oe2003sp4 |
vimRoot:Debian:12 |
before 2:9.0.1378-2+deb12u2.root.io.5 | 2:9.0.1378-2+deb12u2.root.io.52:9.0.1378-2+deb12u2.root.io.72:9.0.1378-2+deb12u2.root.io.82:9.0.1378-2+deb12u2.root.io.142:9.0.1378-2+deb12u2.root.io.152:9.0.1378-2+deb12u2.root.io.62:9.0.1378-2+deb12u2.root.io.42:9.0.1378-2+deb12u2.root.io.92:9.0.1378-2+deb12u2.root.io.102:9.0.1378-2+deb12u2.root.io.112:9.0.1378-2+deb12u2.root.io.122:9.0.1378-2+deb12u2.root.io.132:9.0.1378-2+deb12u2.root.io.162:9.0.1378-2+deb12u2.aikido.202:9.0.1378-2+deb12u2.root.io.172:9.0.1378-2+deb12u2.root.io.192:9.0.1378-2+deb12u2.root.io.182:9.0.1378-2+deb12u2.aikido.21 |
rootio-vimRoot:Debian:12 |
before 2:9.0.1378-2+deb12u2.root.io.5 | 2:9.0.1378-2+deb12u2.root.io.52:9.0.1378-2+deb12u2.root.io.72:9.0.1378-2+deb12u2.root.io.82:9.0.1378-2+deb12u2.root.io.142:9.0.1378-2+deb12u2.root.io.152:9.0.1378-2+deb12u2.root.io.62:9.0.1378-2+deb12u2.root.io.42:9.0.1378-2+deb12u2.root.io.92:9.0.1378-2+deb12u2.root.io.102:9.0.1378-2+deb12u2.root.io.112:9.0.1378-2+deb12u2.root.io.122:9.0.1378-2+deb12u2.root.io.132:9.0.1378-2+deb12u2.root.io.162:9.0.1378-2+deb12u2.aikido.202:9.0.1378-2+deb12u2.root.io.172:9.0.1378-2+deb12u2.root.io.192:9.0.1378-2+deb12u2.root.io.182:9.0.1378-2+deb12u2.aikido.21 |
vimSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 9.1.1406-150500.20.27.1 | 9.1.1406-150500.20.27.1 |
vimSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-17.48.1 | 9.1.1406-17.48.1 |
vimSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 9.1.1406-17.48.1 | 9.1.1406-17.48.1 |
vimSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Manager Proxy 4.3 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Manager Server 4.3 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Micro 5.1 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
vimSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 9.1.1406-150000.5.75.1 | 9.1.1406-150000.5.75.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-29768 is a medium vulnerability (CVSS 4.4) in Vim, published March 13, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in vim 9.1.1202-r0.
References
github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf
security.netapp.com/advisory/ntap-20250502-0001
security.alpinelinux.org/vuln/CVE-2025-29768
nvd.nist.gov/vuln/detail/CVE-2025-29768
docs.bell-sw.com/security/cves/CVE-2025-29768
Show 14 moreShow less
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765208529.html
security-tracker.debian.org/tracker/CVE-2025-29768
advisories.mageia.org/MGASA-2025-0107.html
bugs.mageia.org/show_bug.cgi?id=34097
openwall.com/lists/oss-security/2025/03/12/4
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1351
suse.com/support/update/announcement/2025/suse-su-202502226-1
bugzilla.suse.com/1228776