CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

Red Hat has determined this flaw to be of LOW impact as the vulnerable code is not used when compiling and building /usr/bin/vi; the code is not used because /usr/bin/vi is built with --with-features=small.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.