{"id":"CVE-2025-29768","aliases":["ALPINE-CVE-2025-29768","AZL-58616","AZL-58632","BELL-CVE-2025-29768","CLSA-2025-1765208529","DEBIAN-CVE-2025-29768","EUVD-2025-6366","GHSA-693p-m996-3rmf","MGASA-2025-0107","OESA-2025-1351","ROOT-OS-DEBIAN-12-CVE-2025-29768","SUSE-SU-2025:02226-1","SUSE-SU-2025:02227-1","SUSE-SU-2025:02228-1"],"status":"published","title":"Vim vulnerable to potential data loss with zip.vim and special crafted zip files","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00398,"percentile":0.34493,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-88"],"published":"2025-03-13T17:04:56Z","modified":"2026-11-03T06:32:14Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["9.1.1202-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["9.1.1202-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["9.1.1202-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"vim","fixed_in":["9.1.1198-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["9.1.1198-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"vim","fixed_in":["9.1.1202-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"vim","fixed_in":["9.1.1202-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.1.1230-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.1.1230-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"vim","fixed_in":["9.1.1202-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"vim","fixed_in":["9.0-33.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"vim","fixed_in":["9.0-33.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"vim","fixed_in":["9.0.2092-18.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"vim","fixed_in":["9.0.2092-18.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"vim","fixed_in":["9.0-33.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"vim","fixed_in":["2:9.0.1378-2+deb12u2.root.io.5","2:9.0.1378-2+deb12u2.root.io.7","2:9.0.1378-2+deb12u2.root.io.8","2:9.0.1378-2+deb12u2.root.io.14","2:9.0.1378-2+deb12u2.root.io.15","2:9.0.1378-2+deb12u2.root.io.6","2:9.0.1378-2+deb12u2.root.io.4","2:9.0.1378-2+deb12u2.root.io.9","2:9.0.1378-2+deb12u2.root.io.10","2:9.0.1378-2+deb12u2.root.io.11","2:9.0.1378-2+deb12u2.root.io.12","2:9.0.1378-2+deb12u2.root.io.13","2:9.0.1378-2+deb12u2.root.io.16","2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.root.io.17","2:9.0.1378-2+deb12u2.root.io.19","2:9.0.1378-2+deb12u2.root.io.18","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-vim","fixed_in":["2:9.0.1378-2+deb12u2.root.io.5","2:9.0.1378-2+deb12u2.root.io.7","2:9.0.1378-2+deb12u2.root.io.8","2:9.0.1378-2+deb12u2.root.io.14","2:9.0.1378-2+deb12u2.root.io.15","2:9.0.1378-2+deb12u2.root.io.6","2:9.0.1378-2+deb12u2.root.io.4","2:9.0.1378-2+deb12u2.root.io.9","2:9.0.1378-2+deb12u2.root.io.10","2:9.0.1378-2+deb12u2.root.io.11","2:9.0.1378-2+deb12u2.root.io.12","2:9.0.1378-2+deb12u2.root.io.13","2:9.0.1378-2+deb12u2.root.io.16","2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.root.io.17","2:9.0.1378-2+deb12u2.root.io.19","2:9.0.1378-2+deb12u2.root.io.18","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1202-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1202-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1202-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1198-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1198-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0820-r2"},{"fixed":"9.1.1202-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.1395-r0"},{"fixed":"9.1.1202-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_1.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_1.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_1.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_1.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_1.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:9.0.1378-2","2:9.0.1378-2+deb12u1","2:9.0.1378-2+deb12u2","2:9.0.1658-1","2:9.0.1672-1","2:9.0.1894-1","2:9.0.2018-1","2:9.0.2087-1","2:9.0.2103-1","2:9.0.2116-1","2:9.0.2189-1","2:9.1.0-1","2:9.1.0016-1","2:9.1.0199-1","2:9.1.0374-1","2:9.1.0377-1","2:9.1.0496-1","2:9.1.0698-1","2:9.1.0709-1","2:9.1.0709-2","2:9.1.0777-1","2:9.1.0861-1","2:9.1.0967-1","2:9.1.0967-2","2:9.1.1113-1","2:9.1.1230-1","2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1","2:9.2.0782-1","2:9.2.0858-1"]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.1230-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.1230-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1202-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-33.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-33.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-18.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-18.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-33.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.5"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.7"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.8"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.14"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.15"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.6"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.4"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.9"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.10"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.11"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.12"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.13"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.16"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.17"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.19"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.18"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.5"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.7"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.8"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.14"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.15"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.6"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.4"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.9"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.10"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.11"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.12"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.13"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.16"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.17"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.19"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.18"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150500.20.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-17.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-17.48.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.1406-150000.5.75.1"}]}],"bundled":2}],"products":[{"vendor":"netapp","product":"bootstrap_os"},{"vendor":"vim","product":"vim"}],"references":[{"url":"https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory"]},{"url":"https://github.com/vim/vim/commit/f209dcd3defb95bae21b2740910e6aa7bb940531","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20250502-0001/","tags":["Third Party Advisory","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-29768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29768","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-29768","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765208529.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29768.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-29768","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0107.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34097","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/03/12/4","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1351","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502226-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1228776","tags":["report"]},{"url":"https://bugzilla.suse.com/1239602","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29768","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502227-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502228-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-29768","title":"Vim vulnerable to potential data loss with zip.vim and special crafted zip files","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:04:56.92Z","modified":"2025-05-02T23:03:03.457Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:32:45.797843Z"}],"euvd":[{"id":"EUVD-2025-6366","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:04:56Z","modified":"2025-05-02T23:03:03Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:51:54.869696Z"}],"nvd":[{"id":"CVE-2025-29768","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:15:37.623Z","modified":"2026-06-17T09:05:38.24Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:10:53.93104Z"}],"osv":[{"id":"ALPINE-CVE-2025-29768","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:15:37.623Z","modified":"2026-11-03T06:32:14.590322477Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2025-29768","status":"published","published":"2025-03-15T05:58:48.72787Z","modified":"2026-01-26T09:39:06.369431Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-29768","title":"Vim vulnerable to potential data loss with zip.vim and special crafted zip files","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:04:56.92Z","modified":"2026-10-28T10:59:01.032396446Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-29768","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:15:37.623Z","modified":"2026-09-01T20:05:45.508206929Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1351","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press \u0026apos;x\u0026apos; on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.(CVE-2025-29768)","status":"published","published":"2025-03-29T11:08:27Z","modified":"2026-08-18T01:17:51.47633652Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-29768","title":"CVE-2025-29768 in vim - Patched by Root","description":"Root has patched CVE-2025-29768 in the vim package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-26T07:45:37Z","modified":"2026-08-26T09:00:05.699830598Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"AZL-58616","title":"CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:15:37Z","modified":"2026-04-21T04:48:26.497516Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-58632","title":"CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.","status":"published","published":"2025-03-13T17:15:37Z","modified":"2026-04-21T04:37:07.421811Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"CLSA-2025-1765208529","title":"vim: Fix of 2 CVEs","description":"- CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files\n- CVE-2025-29768: use glob '[-]' to protect filenames starting with '-'","status":"published","published":"2025-12-08T15:42:13Z","modified":"2026-10-21T10:46:28.695941669Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"MGASA-2025-0107","title":"Updated vim packages fix security vulnerability","description":"Vim vulnerable to potential data loss with zip.vim and special crafted\nzip files. (CVE-2025-29768)\n","status":"published","published":"2025-03-19T23:44:37Z","modified":"2026-04-16T04:41:25.590902045Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-SU-2025:02226-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).\n- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).\n","status":"published","published":"2025-07-04T13:31:08Z","modified":"2026-02-04T03:39:56.963036Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02227-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).\n- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).\n","status":"published","published":"2025-07-04T13:31:41Z","modified":"2026-02-04T02:23:58.355628Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02228-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776).\n- CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).\n","status":"published","published":"2025-07-04T13:33:24Z","modified":"2026-02-04T03:13:33.480033Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}