CVE-2026-57451

A flaw in Vim allows an attacker to cause a Denial of Service (DoS) via an application crash. If a user opens a maliciously crafted undo file, an out-of-bounds read is triggered in the get_text_props() function due to missing length validation on property counts.

Exploitation requires specific user interaction; the vulnerability only triggers when a local user is tricked into opening a specially crafted undo file in Vim. This limits the attack surface to scenarios where untrusted files are intentionally processed

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users are advised to avoid opening or processing undo files from untrusted or unknown sources. If your team compiles Vim from source, ensure standard compiler security flags (like -D_FORTIFY_SOURCE=2 or 3) are enabled. This provides a safety net by detecting out-of-bounds reads and safely terminating the application before exploitation can occur.