CVE-2023-48236EPSS p49.3%

CVE-2023-48236CVE-2023-48236

vim / vim

Description

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit `73b2d379` which has been included in release version 9.0.2111. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Scoring

CVSS 2.8 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS0.69% probability of exploitation · percentile 49.3% · 2026-08-08T12:02:54Z
Last modified2026-06-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.