CVE-2026-45130

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0450

Description A heap buffer overflow occurs in the read compound() function within src/spellfile.c when loading a specially crafted spell file (.spl) while UTF-8 encoding is active. An attacker-controlled length field in the compound section of the spell file causes a 32-bit signed integer multiplication overflow. This results in the allocation of an undersized buffer for a write loop that executes numerous iterations, leading to a heap overflow. This process can be triggered via a text file modeline that sets the spelllang option, provided a malicious .spl file is present on the runtimepath.

Recommendations Update to version 9.2.0450.