CVE-2025-9389

A memory corruption vulnerability was found in the Vim, where the flaw resides in the __memmove_avx_unaligned_erms() function, located in the memmove-vec-unaligned-erms.S file. The vulnerability is caused by improper handling of memory operations within this function, which can be triggered when a user opens a specially crafted file. An attacker on the local system can exploit this flaw to cause the Vim application to crash. This crash leads to a denial of service.

A memory corruption vulnerability exists in the Vim text editor's __memmove_avx_unaligned_erms() function (memmove-vec-unaligned-erms.S file). This issue can be triggered by a local attacker with low privileges who convinces a user to open a specially crafted file. Exploitation of this flaw leads to an application crash, resulting in a denial of service (DoS) that impacts system Availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

At the time of this analysis, an official patch has not been released. Users should upgrade to vim-9.1.0000 or the latest version.